fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956)

* remove strategy

* move runAsNonRoot to securityContext

* Add podSecurityContext and securityContext to values pt1

* Add podSecurityContext and securityContext to values pt2

* Add podSecurityContext and securityContext to values pt3

* Add podSecurityContext and securityContext to values pt4

* Add podSecurityContext and securityContext to values pt5

* fix empty lines

* Remove secCont from NC - values

* fixPermissions for some apps

* on apps with perm prob, set fsGroup to 0 also
This commit is contained in:
Stavros Kois
2021-09-10 20:10:04 +02:00
committed by GitHub
parent 20bacc444e
commit a7b3ce0e23
88 changed files with 685 additions and 230 deletions
+6 -3
View File
@@ -5,16 +5,19 @@ image:
pullPolicy: IfNotPresent
tag: v1.24.1.4931-1a38e63c6
strategy:
type: Recreate
securityContext:
privileged: false
readOnlyRootFilesystem: false
allowPrivilegeEscalation: true
runAsNonRoot: true
# 44=video 107=render
podSecurityContext:
runAsNonRoot: true
runAsUser: 568
runAsGroup: 568
fsGroup: 568
supplementalGroups: [44, 107]
fsGroupChangePolicy: "OnRootMismatch"
service:
main: