(feat) Standardise and Harden default app securitycontext (#1028)
* Apply security hardened defaults to values.yaml for all apps * Add default common securityContext to all apps * Adjust securityContext defaults in questions.yaml, according to values.yaml * Add default common podSecurityContext to all apps * Clean whitespace * Clean more whitespace * Adjust podSecurityContext defaults in questions.yaml, according to values.yaml * fix pgadmin Co-authored-by: Stavros kois <s.kois@outlook.com>
This commit is contained in:
co-authored by
Stavros kois
parent
fe03d574fc
commit
acf510ea13
@@ -5,6 +5,14 @@ image:
|
||||
pullPolicy: IfNotPresent
|
||||
tag: v2021.09@sha256:e043ab188da4c36abb11d70d82bbfb394ef5054abff21dafbaf54bc21861bd1e
|
||||
|
||||
securityContext:
|
||||
readOnlyRootFilesystem: false
|
||||
runAsNonRoot: false
|
||||
|
||||
podSecurityContext:
|
||||
runAsUser: 0
|
||||
runAsGroup: 0
|
||||
|
||||
envFrom:
|
||||
- configMapRef:
|
||||
name: pihole-env
|
||||
@@ -33,7 +41,6 @@ pihole:
|
||||
DNS1: "9.9.9.9"
|
||||
DNS2: "149.112.112.112"
|
||||
|
||||
|
||||
persistence:
|
||||
config:
|
||||
enabled: true
|
||||
|
||||
Reference in New Issue
Block a user