mirror of
https://github.com/bitnami/charts.git
synced 2026-03-29 16:27:11 +08:00
[bitnami/mongodb-sharded] fix: 🔒 Improve podSecurityContext and containerSecurityContext with essential security fields (#22160)
* [bitnami/mongodb-sharded] fix: 🔒 Improve podSecurityContext and containerSecurityContext with essential security fields Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> * chore: 🔧 Bump chart version Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com> --------- Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>
This commit is contained in:
Javier J. Salmerón-García
committed by
GitHub
GitHub
parent
62db2285e0
commit
3840178435
@@ -198,8 +198,12 @@ The command removes all the Kubernetes components associated with the chart and
|
||||
| `configsvr.external.replicasetName` | Replicaset name of an external Config Server | `""` |
|
||||
| `configsvr.external.replicasetKey` | Replicaset key of an external Config Server | `""` |
|
||||
| `configsvr.podSecurityContext.enabled` | Enable security context | `true` |
|
||||
| `configsvr.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
|
||||
| `configsvr.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
|
||||
| `configsvr.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
|
||||
| `configsvr.podSecurityContext.fsGroup` | Group ID for the container | `1001` |
|
||||
| `configsvr.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `configsvr.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `{}` |
|
||||
| `configsvr.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `configsvr.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `configsvr.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
@@ -287,8 +291,12 @@ The command removes all the Kubernetes components associated with the chart and
|
||||
| `mongos.serviceAccount.annotations` | Additional Service Account annotations (evaluated as a template) | `{}` |
|
||||
| `mongos.serviceAccount.automountServiceAccountToken` | Automount service account token for the server service account | `false` |
|
||||
| `mongos.podSecurityContext.enabled` | Enable security context | `true` |
|
||||
| `mongos.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
|
||||
| `mongos.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
|
||||
| `mongos.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
|
||||
| `mongos.podSecurityContext.fsGroup` | Group ID for the container | `1001` |
|
||||
| `mongos.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `mongos.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `{}` |
|
||||
| `mongos.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `mongos.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `mongos.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
@@ -362,8 +370,12 @@ The command removes all the Kubernetes components associated with the chart and
|
||||
| `shardsvr.dataNode.serviceAccount.annotations` | Additional Service Account annotations (evaluated as a template) | `{}` |
|
||||
| `shardsvr.dataNode.serviceAccount.automountServiceAccountToken` | Automount service account token for the server service account | `false` |
|
||||
| `shardsvr.dataNode.podSecurityContext.enabled` | Enable security context | `true` |
|
||||
| `shardsvr.dataNode.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
|
||||
| `shardsvr.dataNode.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
|
||||
| `shardsvr.dataNode.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
|
||||
| `shardsvr.dataNode.podSecurityContext.fsGroup` | Group ID for the container | `1001` |
|
||||
| `shardsvr.dataNode.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `shardsvr.dataNode.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `{}` |
|
||||
| `shardsvr.dataNode.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `shardsvr.dataNode.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `shardsvr.dataNode.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
@@ -447,8 +459,12 @@ The command removes all the Kubernetes components associated with the chart and
|
||||
| `shardsvr.arbiter.serviceAccount.annotations` | Additional Service Account annotations (evaluated as a template) | `{}` |
|
||||
| `shardsvr.arbiter.serviceAccount.automountServiceAccountToken` | Automount service account token for the server service account | `false` |
|
||||
| `shardsvr.arbiter.podSecurityContext.enabled` | Enable security context | `true` |
|
||||
| `shardsvr.arbiter.podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
|
||||
| `shardsvr.arbiter.podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
|
||||
| `shardsvr.arbiter.podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
|
||||
| `shardsvr.arbiter.podSecurityContext.fsGroup` | Group ID for the container | `1001` |
|
||||
| `shardsvr.arbiter.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `shardsvr.arbiter.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `{}` |
|
||||
| `shardsvr.arbiter.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `shardsvr.arbiter.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `shardsvr.arbiter.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
@@ -496,6 +512,7 @@ The command removes all the Kubernetes components associated with the chart and
|
||||
| `metrics.extraArgs` | String with extra arguments to the metrics exporter | `""` |
|
||||
| `metrics.resources` | Metrics exporter resource requests and limits | `{}` |
|
||||
| `metrics.containerSecurityContext.enabled` | Enabled containers' Security Context | `true` |
|
||||
| `metrics.containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `{}` |
|
||||
| `metrics.containerSecurityContext.runAsUser` | Set containers' Security Context runAsUser | `1001` |
|
||||
| `metrics.containerSecurityContext.runAsNonRoot` | Set container's Security Context runAsNonRoot | `true` |
|
||||
| `metrics.containerSecurityContext.privileged` | Set container's Security Context privileged | `false` |
|
||||
|
||||
Reference in New Issue
Block a user