feat(arksurvivalevolved): harden some more

2025-05-06 14:33:38 +02:00
parent f0a18ddbf1
commit bde436ada0
3 changed files with 7 additions and 6 deletions
@@ -36,5 +36,4 @@ sources:
  - https://github.com/truecharts/charts/tree/master/charts/stable/arksurvivalevolved
  - https://hub.docker.com/r/drpsychick/arkserver
 type: application
-version: 10.0.6
-
+version: 10.0.7
@@ -7,12 +7,14 @@ securityContext:
  container:
    runAsNonRoot: false
    runAsUser: 1001
-    runAsGroup: 0
+    runAsGroup: 1001
    privileged: false
-    readOnlyRootFilesystem: false
+    readOnlyRootFilesystem: true
    allowPrivilegeEscalation: true
    capabilities:
-      drop: []
+      drop: ["ALL"]
+      add: ["CHOWN", "FOWNER", "DAC_OVERRIDE", "SETGID", "SETUID"]
+
 service:
  main:
    enabled: true
@@ -10,7 +10,7 @@ spec:
  chart:
    spec:
      chart: arksurvivalevolved
-      version: 10.0.6
+      version: 10.0.7
      sourceRef:
        kind: HelmRepository
        name: truecharts