(feat) Standardise and Harden default app securitycontext (#1028)

* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>
This commit is contained in:
Kjeld Schouten-Lebbing
2021-09-26 20:05:21 +02:00
committed by GitHub
co-authored by Stavros kois
parent fe03d574fc
commit acf510ea13
314 changed files with 2675 additions and 3091 deletions
+8 -1
View File
@@ -5,6 +5,14 @@ image:
pullPolicy: IfNotPresent
tag: v2021.09@sha256:e043ab188da4c36abb11d70d82bbfb394ef5054abff21dafbaf54bc21861bd1e
securityContext:
readOnlyRootFilesystem: false
runAsNonRoot: false
podSecurityContext:
runAsUser: 0
runAsGroup: 0
envFrom:
- configMapRef:
name: pihole-env
@@ -33,7 +41,6 @@ pihole:
DNS1: "9.9.9.9"
DNS2: "149.112.112.112"
persistence:
config:
enabled: true