(feat) Standardise and Harden default app securitycontext (#1028)
* Apply security hardened defaults to values.yaml for all apps * Add default common securityContext to all apps * Adjust securityContext defaults in questions.yaml, according to values.yaml * Add default common podSecurityContext to all apps * Clean whitespace * Clean more whitespace * Adjust podSecurityContext defaults in questions.yaml, according to values.yaml * fix pgadmin Co-authored-by: Stavros kois <s.kois@outlook.com>
This commit is contained in:
co-authored by
Stavros kois
parent
fe03d574fc
commit
acf510ea13
@@ -86,8 +86,6 @@ questions:
|
||||
default: "002"
|
||||
# Include{containerConfig}
|
||||
|
||||
|
||||
|
||||
- variable: service
|
||||
group: "Networking and Services"
|
||||
label: "Configure Service(s)"
|
||||
@@ -192,7 +190,6 @@ questions:
|
||||
max: 65535
|
||||
default: 36049
|
||||
|
||||
|
||||
- variable: serviceexpert
|
||||
group: "Networking and Services"
|
||||
label: "Show Expert Config"
|
||||
@@ -541,8 +538,6 @@ questions:
|
||||
schema:
|
||||
type: string
|
||||
|
||||
|
||||
|
||||
# Include{ingressList}
|
||||
|
||||
- variable: securityContext
|
||||
@@ -565,7 +560,7 @@ questions:
|
||||
label: "Allow Privilege Escalation"
|
||||
schema:
|
||||
type: boolean
|
||||
default: true
|
||||
default: false
|
||||
- variable: runAsNonRoot
|
||||
label: "runAsNonRoot"
|
||||
schema:
|
||||
@@ -616,6 +611,7 @@ questions:
|
||||
description: "OnRootMismatch"
|
||||
- value: "Always"
|
||||
description: "Always"
|
||||
|
||||
- variable: resources
|
||||
group: "Resources and Devices"
|
||||
label: ""
|
||||
@@ -657,7 +653,6 @@ questions:
|
||||
default: "50Mi"
|
||||
valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$'
|
||||
|
||||
|
||||
- variable: autoscaling
|
||||
group: "Resources and Devices"
|
||||
label: "(Advanced) Horizontal Pod Autoscaler"
|
||||
|
||||
Reference in New Issue
Block a user