Fix pod security (#204)

* Fix pod security

* Extra security context

* Use correct security context
This commit is contained in:
Jansen Fuller
2026-05-29 18:06:47 +00:00
committed by GitHub
parent 6612d0d02b
commit 1a4f1d94b6
2 changed files with 5 additions and 1 deletions

View File

@ -2,7 +2,7 @@ apiVersion: v2
name: taskchampion-sync-server name: taskchampion-sync-server
description: A Helm chart for deploying TaskChampion Sync Server on Kubernetes description: A Helm chart for deploying TaskChampion Sync Server on Kubernetes
type: application type: application
version: 0.1.1 version: 0.1.2
appVersion: "0.7.0" appVersion: "0.7.0"
keywords: keywords:
- taskchampion - taskchampion

View File

@ -30,6 +30,8 @@ spec:
- name: postgres-init - name: postgres-init
image: "{{ .Values.postgres.initContainer.image }}" image: "{{ .Values.postgres.initContainer.image }}"
imagePullPolicy: {{ .Values.postgres.initContainer.imagePullPolicy }} imagePullPolicy: {{ .Values.postgres.initContainer.imagePullPolicy }}
securityContext:
allowPrivilegeEscalation: false
env: env:
- name: PGURI - name: PGURI
valueFrom: valueFrom:
@ -86,6 +88,8 @@ spec:
image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}" image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
{{- end }} {{- end }}
imagePullPolicy: {{ .Values.image.pullPolicy }} imagePullPolicy: {{ .Values.image.pullPolicy }}
securityContext:
allowPrivilegeEscalation: false
env: env:
{{- range $name, $value := .Values.env }} {{- range $name, $value := .Values.env }}
- name: {{ $name }} - name: {{ $name }}