Commit Graph

6 Commits

Author SHA1 Message Date
Kjeld Schouten-Lebbing acf510ea13
(feat) Standardise and Harden default app securitycontext (#1028)
* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>
2021-09-26 20:05:21 +02:00
renovate[bot] 3e67e1c977
chore(deps): update non-major (#962)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-11 13:04:47 +02:00
Kjeld Schouten-Lebbing a8670a1482
feat: pin all container references to digests (#963) 2021-09-11 13:00:39 +02:00
Stavros Kois a7b3ce0e23
fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956)
* remove strategy

* move runAsNonRoot to securityContext

* Add podSecurityContext and securityContext to values pt1

* Add podSecurityContext and securityContext to values pt2

* Add podSecurityContext and securityContext to values pt3

* Add podSecurityContext and securityContext to values pt4

* Add podSecurityContext and securityContext to values pt5

* fix empty lines

* Remove secCont from NC - values

* fixPermissions for some apps

* on apps with perm prob, set fsGroup to 0 also
2021-09-10 20:10:04 +02:00
Kjeld Schouten-Lebbing 8a24c8721f
Correct targetPort and always use PVC during testing (#840)
* Fix targetPort not being processed correctly

* Always use PVC in values.yaml just to be sure it actually works

* fix a small copy-paste mistake

* bump

* fix hyperion-ng mistake
2021-08-29 14:02:17 +02:00
kjeld Schouten-Lebbing d3deb8af69
Reorganise the trains 2021-08-23 21:32:52 +02:00