(feat) Standardise and Harden default app securitycontext (#1028)

* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>

charts/library/common/values.yaml

@@ -8,7 +8,6 @@ openvpnImage:
   # -- Specify the openvpn client image pull policy
   pullPolicy: IfNotPresent
 
-
 # -- WireGuard specific configuration
 # @default -- See below
 wireguardImage:
@@ -27,7 +26,6 @@ promtailImage:
   # -- Specify the promtail image pull policy
   pullPolicy: IfNotPresent
 
-
 netshootImage:
   # -- Specify the netshoot image
   repository: nicolaka/netshoot
@@ -261,7 +259,6 @@ securityContext:
   allowPrivilegeEscalation: false
   runAsNonRoot: true
 
-
 # -- Configure the lifecycle for the main container
 lifecycle: {}
 
@@ -358,7 +355,6 @@ termination:
   # -- [[ref](https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-v1/#lifecycle)]
   gracePeriodSeconds: 10
 
-
 # -- Configure additional services for the chart here.
 # @default -- See below
 serviceList: []
@@ -426,7 +422,6 @@ service:
         # [[ref]](https://kubernetes.io/docs/concepts/services-networking/service/#type-nodeport)
         nodePort:
 
-
 # -- Configure ingressList for the chart here.
 # Additional items can be added by adding a items similar to ingress
 # @default -- []
@@ -608,7 +603,6 @@ persistence:
     # specify a size for memory backed volumes.
     sizeLimit:  # 1Gi
 
-
   # -- Example of a hostPath mount
   # [[ref]]https://kubernetes.io/docs/concepts/storage/volumes/#hostpath)
   # @default -- See below
@@ -737,7 +731,6 @@ addons:
       # name: someenv
       # value: somevalue
 
-
     # -- Provide a customized vpn configuration file to be used by the VPN.
     configFile:
       enabled: true
@@ -749,7 +742,6 @@ addons:
       # See Kubernetes documentation for options.
       hostPathType: "File"
 
-
   # -- The common library supports adding a code-server add-on to access files. It can be configured under this key.
   # For more info, check out [our docs](http://docs.k8s-at-home.com/our-helm-charts/common-library-add-ons/#code-server)
   # @default -- See values.yaml