Support specifying image digest and container securityContext

charts/kafka-lag-exporter/templates/040-Deployment.yaml

@@ -28,13 +28,21 @@ spec:
       {{- end }}
       containers:
         - name: {{ .Chart.Name }}
+          {{- if .Values.image.digest }}
+          image: "{{ .Values.image.repository }}@{{ .Values.image.digest }}"
+          {{- else }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
+          {{- end }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           env: []
           ports:
             - name: http
               containerPort: {{ .Values.service.port }}
               protocol: TCP
+          {{- if .Values.securityContext }}
+          securityContext:
+{{ toYaml .Values.securityContext | indent 12 }}
+          {{- end }}
           livenessProbe:
             httpGet:
               path: /

charts/kafka-lag-exporter/values.yaml

@@ -69,7 +69,15 @@ akkaLogLevel: DEBUG
 image:
   repository: lightbend/kafka-lag-exporter
   tag: 0.5.5-SNAPSHOT
+  # If digest is set it will be used instead of tag to specify the image
+  # digest: sha256:0f6387aa011e6eb7952ea211ac139bf8613ad3ef6954a1a5d910676d293bd610
   pullPolicy: Always
+securityContext: {}
+  # allowPrivilegeEscalation: false
+  # runAsUser: 1001
+  # runAsNonRoot: true
+  # capabilities:
+  #   drop: ["all"]
 service:
   type: ClusterIP
   port: 8000