fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956)
* remove strategy * move runAsNonRoot to securityContext * Add podSecurityContext and securityContext to values pt1 * Add podSecurityContext and securityContext to values pt2 * Add podSecurityContext and securityContext to values pt3 * Add podSecurityContext and securityContext to values pt4 * Add podSecurityContext and securityContext to values pt5 * fix empty lines * Remove secCont from NC - values * fixPermissions for some apps * on apps with perm prob, set fsGroup to 0 also
This commit is contained in:
@@ -5,6 +5,18 @@ image:
|
||||
pullPolicy: IfNotPresent
|
||||
tag: "4.30.4"
|
||||
|
||||
securityContext:
|
||||
privileged: false
|
||||
readOnlyRootFilesystem: true
|
||||
allowPrivilegeEscalation: false
|
||||
runAsNonRoot: true
|
||||
|
||||
podSecurityContext:
|
||||
runAsUser: 568
|
||||
runAsGroup: 568
|
||||
fsGroup: 568
|
||||
supplementalGroups: []
|
||||
fsGroupChangePolicy: "OnRootMismatch"
|
||||
|
||||
postgresqlImage:
|
||||
repository: postgres
|
||||
@@ -14,9 +26,6 @@ postgresqlImage:
|
||||
command: ["authelia"]
|
||||
args: ["--config=/configuration.yaml"]
|
||||
|
||||
strategy:
|
||||
type: Recreate
|
||||
|
||||
enableServiceLinks: false
|
||||
|
||||
service:
|
||||
@@ -81,18 +90,6 @@ redis:
|
||||
persistence:
|
||||
enabled: false
|
||||
|
||||
|
||||
podSecurityContext:
|
||||
runAsUser: 568
|
||||
runAsGroup: 568
|
||||
fsGroup: 568
|
||||
|
||||
securityContext:
|
||||
readOnlyRootFilesystem: true
|
||||
allowPrivilegeEscalation: false
|
||||
privileged: false
|
||||
|
||||
|
||||
resources:
|
||||
limits: {}
|
||||
# limits:
|
||||
|
||||
Reference in New Issue
Block a user