Commit Graph

5 Commits

Author SHA1 Message Date
Kjeld Schouten-Lebbing acf510ea13
(feat) Standardise and Harden default app securitycontext (#1028)
* Apply security hardened defaults to values.yaml for all apps

* Add default common securityContext to all apps

* Adjust securityContext defaults in questions.yaml, according to values.yaml

* Add default common podSecurityContext to all apps

* Clean whitespace

* Clean more whitespace

* Adjust podSecurityContext defaults in questions.yaml, according to values.yaml

* fix pgadmin

Co-authored-by: Stavros kois <s.kois@outlook.com>
2021-09-26 20:05:21 +02:00
Kjeld Schouten-Lebbing a8670a1482
feat: pin all container references to digests (#963) 2021-09-11 13:00:39 +02:00
Stavros Kois a7b3ce0e23
fix: make sure podSecurityContext is included in both SCALE and Helm installs (#956)
* remove strategy

* move runAsNonRoot to securityContext

* Add podSecurityContext and securityContext to values pt1

* Add podSecurityContext and securityContext to values pt2

* Add podSecurityContext and securityContext to values pt3

* Add podSecurityContext and securityContext to values pt4

* Add podSecurityContext and securityContext to values pt5

* fix empty lines

* Remove secCont from NC - values

* fixPermissions for some apps

* on apps with perm prob, set fsGroup to 0 also
2021-09-10 20:10:04 +02:00
Stavros Kois 7998db2234
feat: Add regex validation to resources CPU and RAM for all apps (#935)
* Adds RAM resource regex validation

* Adds CPU resource regex validation
2021-09-09 01:08:11 +02:00
kjeld Schouten-Lebbing ff9eb17b28
cleanup tools, templates and workflows 2021-08-19 11:47:00 +02:00