fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956)

* remove strategy

* move runAsNonRoot to securityContext

* Add podSecurityContext and securityContext to values pt1

* Add podSecurityContext and securityContext to values pt2

* Add podSecurityContext and securityContext to values pt3

* Add podSecurityContext and securityContext to values pt4

* Add podSecurityContext and securityContext to values pt5

* fix empty lines

* Remove secCont from NC - values

* fixPermissions for some apps

* on apps with perm prob, set fsGroup to 0 also
This commit is contained in:
Stavros Kois
2021-09-10 20:10:04 +02:00
committed by GitHub
parent 20bacc444e
commit a7b3ce0e23
88 changed files with 685 additions and 230 deletions
+12 -2
View File
@@ -5,8 +5,18 @@ image:
pullPolicy: IfNotPresent
tag: v21.1
strategy:
type: Recreate
securityContext:
privileged: false
readOnlyRootFilesystem: false
allowPrivilegeEscalation: true
runAsNonRoot: true
podSecurityContext:
runAsUser: 568
runAsGroup: 568
fsGroup: 568
supplementalGroups: []
fsGroupChangePolicy: "OnRootMismatch"
service:
main: