DLKE 30 Enforce security context (#80)

* DLKE-30 Enforce security context
Linkurious · Mar 12, 2024 · b9b5970 · b9b5970
1 parent 87cc345
commit b9b5970
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 7 deletions.
diff --git a/charts/linkurious-enterprise/Chart.yaml b/charts/linkurious-enterprise/Chart.yaml
@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.2.27
+version: 0.2.28
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

diff --git a/charts/linkurious-enterprise/values.yaml b/charts/linkurious-enterprise/values.yaml
@@ -33,17 +33,15 @@ podSecurityContext:
   fsGroup: 2000
   runAsNonRoot: true
   runAsUser: 2013
+  seccompProfile:
+    type: RuntimeDefault
 
 securityContext:
+  # readOnlyRootFilesystem: true
+  allowPrivilegeEscalation: false
   capabilities:
     drop:
     - ALL
-  # readOnlyRootFilesystem: true
-  runAsNonRoot: true
-  runAsUser: 2013
-  allowPrivilegeEscalation: false
-  seccompProfile:
-    type: RuntimeDefault
 
 ## Readiness and liveness probes for default backend
 ## Ref: https://kubernetes.io/docs/tasks/configure-pod-container/configure-liveness-readiness-probes/