(feat) Standardise and Harden default app securitycontext (#1028)
* Apply security hardened defaults to values.yaml for all apps * Add default common securityContext to all apps * Adjust securityContext defaults in questions.yaml, according to values.yaml * Add default common podSecurityContext to all apps * Clean whitespace * Clean more whitespace * Adjust podSecurityContext defaults in questions.yaml, according to values.yaml * fix pgadmin Co-authored-by: Stavros kois <s.kois@outlook.com>
This commit is contained in:
co-authored by
Stavros kois
parent
fe03d574fc
commit
acf510ea13
@@ -106,8 +106,6 @@ questions:
|
||||
default: "{{ .Values.service.main.ports.main.port }}"
|
||||
# Include{containerConfig}
|
||||
|
||||
|
||||
|
||||
- variable: service
|
||||
group: "Networking and Services"
|
||||
label: "Configure Service(s)"
|
||||
@@ -212,7 +210,6 @@ questions:
|
||||
max: 65535
|
||||
default: 36084
|
||||
|
||||
|
||||
- variable: serviceexpert
|
||||
group: "Networking and Services"
|
||||
label: "Show Expert Config"
|
||||
@@ -561,8 +558,6 @@ questions:
|
||||
schema:
|
||||
type: string
|
||||
|
||||
|
||||
|
||||
# Include{ingressList}
|
||||
|
||||
- variable: securityContext
|
||||
@@ -580,12 +575,12 @@ questions:
|
||||
label: "ReadOnly Root Filesystem"
|
||||
schema:
|
||||
type: boolean
|
||||
default: false
|
||||
default: true
|
||||
- variable: allowPrivilegeEscalation
|
||||
label: "Allow Privilege Escalation"
|
||||
schema:
|
||||
type: boolean
|
||||
default: true
|
||||
default: false
|
||||
- variable: runAsNonRoot
|
||||
label: "runAsNonRoot"
|
||||
schema:
|
||||
@@ -718,7 +713,6 @@ questions:
|
||||
default: "50Mi"
|
||||
valid_chars: '^([0-9.]+)([EPTGMK]i?|[EPTGMK]?|e[0-9]+)$'
|
||||
|
||||
|
||||
- variable: autoscaling
|
||||
group: "Resources and Devices"
|
||||
label: "(Advanced) Horizontal Pod Autoscaler"
|
||||
|
||||
Reference in New Issue
Block a user