fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956)

* remove strategy

* move runAsNonRoot to securityContext

* Add podSecurityContext and securityContext to values pt1

* Add podSecurityContext and securityContext to values pt2

* Add podSecurityContext and securityContext to values pt3

* Add podSecurityContext and securityContext to values pt4

* Add podSecurityContext and securityContext to values pt5

* fix empty lines

* Remove secCont from NC - values

* fixPermissions for some apps

* on apps with perm prob, set fsGroup to 0 also
This commit is contained in:
Stavros Kois
2021-09-10 20:10:04 +02:00
committed by GitHub
parent 20bacc444e
commit a7b3ce0e23
88 changed files with 685 additions and 230 deletions
+12 -15
View File
@@ -5,6 +5,18 @@ image:
pullPolicy: IfNotPresent
tag: "4.30.4"
securityContext:
privileged: false
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
runAsNonRoot: true
podSecurityContext:
runAsUser: 568
runAsGroup: 568
fsGroup: 568
supplementalGroups: []
fsGroupChangePolicy: "OnRootMismatch"
postgresqlImage:
repository: postgres
@@ -14,9 +26,6 @@ postgresqlImage:
command: ["authelia"]
args: ["--config=/configuration.yaml"]
strategy:
type: Recreate
enableServiceLinks: false
service:
@@ -81,18 +90,6 @@ redis:
persistence:
enabled: false
podSecurityContext:
runAsUser: 568
runAsGroup: 568
fsGroup: 568
securityContext:
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
privileged: false
resources:
limits: {}
# limits: