DevOps/truecharts
2
0
Fork 0
Code Issues Pull Requests Actions 27 Packages Projects Releases 1 Wiki Activity

harden default security options for common

Browse Source
This commit is contained in:
kjeld Schouten-Lebbing
2021-09-25 12:10:24 +02:00
parent a42793a37f
commit 483d29ee0e
2 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/library/common/Chart.yaml
+1 -1
View File
@@ -15,4 +15,4 @@ maintainers:
name: common name: common
sources: null sources: null
type: library type: library
version: 7.0.14 version: 8.0.0
charts/library/common/values.yaml
+9 -3
View File
@@ -247,13 +247,19 @@ dnsConfig:
enableServiceLinks: false enableServiceLinks: false
# -- Configure the Security Context for the Pod # -- Configure the Security Context for the Pod
podSecurityContext: {} podSecurityContext:
runAsUser: 568
runAsGroup: 568
fsGroup: 568
supplementalGroups: []
fsGroupChangePolicy: OnRootMismatch
# -- Configure the Security Context for the main container # -- Configure the Security Context for the main container
securityContext: securityContext:
privileged: false privileged: false
readOnlyRootFilesystem: false readOnlyRootFilesystem: true
allowPrivilegeEscalation: true allowPrivilegeEscalation: false
runAsNonRoot: true
# -- Configure the lifecycle for the main container # -- Configure the lifecycle for the main container