(feat) Standardise and Harden default app securitycontext (#1028)

* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>
This commit is contained in:
Kjeld Schouten-Lebbing
2021-09-26 20:05:21 +02:00
committed by GitHub
co-authored by Stavros kois
parent fe03d574fc
commit acf510ea13
314 changed files with 2675 additions and 3091 deletions
@@ -86,8 +86,6 @@ questions:
default: "002"
# Include{containerConfig}
- variable: service
group: "Networking and Services"
label: "Configure Service(s)"
@@ -337,7 +335,6 @@ questions:
max: 65535
default: 36040
- variable: serviceexpert
group: "Networking and Services"
label: "Show Expert Config"
@@ -687,8 +684,6 @@ questions:
schema:
type: string
# Include{ingressList}
- variable: securityContext
@@ -711,7 +706,7 @@ questions:
label: "Allow Privilege Escalation"
schema:
type: boolean
default: true
default: false
- variable: runAsNonRoot
label: "runAsNonRoot"
schema:
@@ -762,6 +757,7 @@ questions:
description: "OnRootMismatch"
- value: "Always"
description: "Always"
- variable: resources
group: "Resources and Devices"
label: ""
@@ -803,7 +799,6 @@ questions:
default: "50Mi"
valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$'
- variable: autoscaling
group: "Resources and Devices"
label: "(Advanced) Horizontal Pod Autoscaler"