fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956)

* remove strategy

* move runAsNonRoot to securityContext

* Add podSecurityContext and securityContext to values pt1

* Add podSecurityContext and securityContext to values pt2

* Add podSecurityContext and securityContext to values pt3

* Add podSecurityContext and securityContext to values pt4

* Add podSecurityContext and securityContext to values pt5

* fix empty lines

* Remove secCont from NC - values

* fixPermissions for some apps

* on apps with perm prob, set fsGroup to 0 also
This commit is contained in:
Stavros Kois
2021-09-10 20:10:04 +02:00
committed by GitHub
parent 20bacc444e
commit a7b3ce0e23
88 changed files with 685 additions and 230 deletions
+7 -7
View File
@@ -5,14 +5,18 @@ image:
pullPolicy: IfNotPresent
tag: 22.1.1
podSecurityContext:
runAsUser: 0
runAsGroup: 0
fsGroup: 33
supplementalGroups: []
fsGroupChangePolicy: "OnRootMismatch"
postgresqlImage:
repository: postgres
pullPolicy: IfNotPresent
tag: "13.1"
strategy:
type: Recreate
service:
main:
ports:
@@ -87,10 +91,6 @@ initContainers:
name: dbcreds
key: plainhost
podSecurityContext:
fsGroup: 33
# -- Probe configuration
# -- [[ref]](https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-startup-probes/)
# @default -- See below