Skip to content

Acknowledge the reality of securityContext handling - #198

Merged
cfis merged 2 commits into
docker-mailserver:masterfrom
tdg5:make-security-context-more-true
Oct 27, 2026
Merged

cfis merged 2 commits into
docker-mailserver:masterfrom
tdg5:make-security-context-more-true

Conversation

@tdg5

@tdg5 tdg5 commented Apr 1, 2026

Copy link
Copy Markdown
Contributor

This has been touched on elsewhere, but I wanted to make it official to try to save other people time and confusion.

This PR does 2.5 things:

  1. Cleans up trailing whitespace
  2. Adds a coalesce that prioritizes taking securityContext config from .deployment.securityContext, but falls back to .securityContext to try to maintain existing mappings.
    1. I'd vote for removing the coalesce as part of 6.x release.
  3. Replaces the unused default securityContext config with an empty object to try to maintain existing default configuration and be honest about what's really happening upon deployment.

If you disagree with any of these choices, let me know. Feedback is welcome.

Related:

@tdg5
tdg5 requested a review from funkypenguin as a code owner April 1, 2026 17:49
# set those unless you're using a secret
#RELAY_PASSWORD:

securityContext:

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I verified against v5.1.1 that this does not work. The pod won't start with this config.

cfis added a commit to cfis/docker-mailserver-helm that referenced this pull request Oct 27, 2026
deployment.securityContext is now applied (docker-mailserver#198), which changes the pod
for anyone who had set it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This change is released as part of 6.0.0 (docker-mailserver 16) since
applying deployment.securityContext changes behavior for anyone who had
set it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@cfis

cfis commented Oct 27, 2026 •

Copy link
Copy Markdown
Collaborator

Thanks for this @tdg5, and sorry for the very slow reply! I've merged your change, it will be in 6.0.0 which already has backwards incompatible changes. I agree on keeping coalesce fallback for now.

@cfis
cfis merged commit 7b6491f into docker-mailserver:master Oct 27, 2026
5 checks passed
cfis added a commit to cfis/docker-mailserver-helm that referenced this pull request Oct 27, 2026
deployment.securityContext is now applied (docker-mailserver#198), which changes the pod
for anyone who had set it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
cfis added a commit to radicand/docker-mailserver-helm that referenced this pull request Oct 27, 2026
Releases docker-mailserver 16 (docker-mailserver#199), the securityContext fix (docker-mailserver#198) and
the dms-healthcheck probes together.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@cfis cfis mentioned this pull request Oct 27, 2026
cfis added a commit that referenced this pull request Oct 27, 2026
Releases docker-mailserver 16 (#199), the securityContext fix (#198)
and the dms-healthcheck probes (#135).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants