fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956)
* remove strategy * move runAsNonRoot to securityContext * Add podSecurityContext and securityContext to values pt1 * Add podSecurityContext and securityContext to values pt2 * Add podSecurityContext and securityContext to values pt3 * Add podSecurityContext and securityContext to values pt4 * Add podSecurityContext and securityContext to values pt5 * fix empty lines * Remove secCont from NC - values * fixPermissions for some apps * on apps with perm prob, set fsGroup to 0 also
This commit is contained in:
@@ -13,6 +13,19 @@ image:
|
||||
# -- image tag
|
||||
tag: 4.6.1
|
||||
|
||||
securityContext:
|
||||
privileged: false
|
||||
readOnlyRootFilesystem: false
|
||||
allowPrivilegeEscalation: true
|
||||
runAsNonRoot: true
|
||||
|
||||
podSecurityContext:
|
||||
runAsUser: 568
|
||||
runAsGroup: 568
|
||||
fsGroup: 568
|
||||
supplementalGroups: []
|
||||
fsGroupChangePolicy: "OnRootMismatch"
|
||||
|
||||
# -- environment variables. See more environment variables in the [flood documentation] (https://github.com/jesec/flood/blob/v4.6.0/config.ts)
|
||||
# Note: The environmental variables are not case sensitive (e.g. FLOOD_OPTION_port=FLOOD_OPTION_PORT).
|
||||
# @default -- See below
|
||||
|
||||
Reference in New Issue
Block a user