mirror of
https://github.com/GothenburgBitFactory/taskchampion-sync-server.git
synced 2026-07-16 08:24:45 +00:00
Fix pod security (#204)
* Fix pod security * Extra security context * Use correct security context
This commit is contained in:
@ -2,7 +2,7 @@ apiVersion: v2
|
|||||||
name: taskchampion-sync-server
|
name: taskchampion-sync-server
|
||||||
description: A Helm chart for deploying TaskChampion Sync Server on Kubernetes
|
description: A Helm chart for deploying TaskChampion Sync Server on Kubernetes
|
||||||
type: application
|
type: application
|
||||||
version: 0.1.1
|
version: 0.1.2
|
||||||
appVersion: "0.7.0"
|
appVersion: "0.7.0"
|
||||||
keywords:
|
keywords:
|
||||||
- taskchampion
|
- taskchampion
|
||||||
|
|||||||
@ -30,6 +30,8 @@ spec:
|
|||||||
- name: postgres-init
|
- name: postgres-init
|
||||||
image: "{{ .Values.postgres.initContainer.image }}"
|
image: "{{ .Values.postgres.initContainer.image }}"
|
||||||
imagePullPolicy: {{ .Values.postgres.initContainer.imagePullPolicy }}
|
imagePullPolicy: {{ .Values.postgres.initContainer.imagePullPolicy }}
|
||||||
|
securityContext:
|
||||||
|
allowPrivilegeEscalation: false
|
||||||
env:
|
env:
|
||||||
- name: PGURI
|
- name: PGURI
|
||||||
valueFrom:
|
valueFrom:
|
||||||
@ -86,6 +88,8 @@ spec:
|
|||||||
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
imagePullPolicy: {{ .Values.image.pullPolicy }}
|
||||||
|
securityContext:
|
||||||
|
allowPrivilegeEscalation: false
|
||||||
env:
|
env:
|
||||||
{{- range $name, $value := .Values.env }}
|
{{- range $name, $value := .Values.env }}
|
||||||
- name: {{ $name }}
|
- name: {{ $name }}
|
||||||
|
|||||||
Reference in New Issue
Block a user