fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956)

* remove strategy * move runAsNonRoot to securityContext * Add podSecurityContext and securityContext to values pt1 * Add podSecurityContext and securityContext to values pt2 * Add podSecurityContext and securityContext to values pt3 * Add podSecurityContext and securityContext to values pt4 * Add podSecurityContext and securityContext to values pt5 * fix empty lines * Remove secCont from NC - values * fixPermissions for some apps * on apps with perm prob, set fsGroup to 0 also
2021-09-10 20:10:04 +02:00
parent 20bacc444e
commit a7b3ce0e23
88 changed files with 685 additions and 230 deletions
@@ -13,6 +13,19 @@ image:
  # -- image pull policy
  pullPolicy: IfNotPresent

+securityContext:
+  privileged: false
+  readOnlyRootFilesystem: false
+  allowPrivilegeEscalation: true
+  runAsNonRoot: false
+
+podSecurityContext:
+  runAsUser: 0
+  runAsGroup: 0
+  fsGroup: 0
+  supplementalGroups: []
+  fsGroupChangePolicy: "OnRootMismatch"
+
 # -- environment variables. See [image docs](https://docs.linuxserver.io/images/docker-mylar3#environment-variables-e) for more details.
 # @default -- See below
 env: