Bitnami/charts
2
0
Fork 0
mirror of https://github.com/bitnami/charts.git synced 2026-03-02 08:05:03 +08:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/whereabouts] fix: 🔒 Improve podSecurityContext and containerSecurityContext with essential security fields (#22198)

Browse Source 
* [bitnami/whereabouts] fix: 🔒 Improve podSecurityContext and containerSecurityContext with essential security fields

Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>

* chore: 🔧 Bump chart version

Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>

---------

Signed-off-by: Javier Salmeron Garcia <jsalmeron@vmware.com>
This commit is contained in:
Javier J. Salmerón-García
2024-01-16 10:34:05 +01:00
committed by GitHub
parent 87aa8322a8
commit e9a62af994
3 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
bitnami/whereabouts/Chart.yaml
View File

@@ -29,4 +29,4 @@ maintainers:
name: whereabouts
sources:
- https://github.com/bitnami/charts/tree/main/bitnami/whereabouts
version: 0.6.1
version: 0.7.0

4
bitnami/whereabouts/README.md
View File

@@ -116,8 +116,12 @@ The command removes all the Kubernetes components associated with the chart and
| `resources.requests` | The requested resources for the init container | `{}` |
| `resources.limits` | The resources limits for the init container | `{}` |
| `podSecurityContext.enabled` | Enable Whereabouts pods' Security Context | `true` |
| `podSecurityContext.fsGroupChangePolicy` | Set filesystem group change policy | `Always` |
| `podSecurityContext.sysctls` | Set kernel settings using the sysctl interface | `[]` |
| `podSecurityContext.supplementalGroups` | Set filesystem extra groups | `[]` |
| `podSecurityContext.fsGroup` | Whereabouts pods' group ID | `0` |
| `containerSecurityContext.enabled` | Enable Whereabouts containers' Security Context | `true` |
| `containerSecurityContext.seLinuxOptions` | Set SELinux options in container | `{}` |
| `containerSecurityContext.runAsUser` | Whereabouts containers' Security Context | `0` |
| `containerSecurityContext.runAsNonRoot` | Set Whereabouts container's Security Context runAsNonRoot | `false` |
| `containerSecurityContext.privileged` | Set Whereabouts container's Security Context privileged | `true` |

8
bitnami/whereabouts/values.yaml
View File

@@ -211,14 +211,21 @@ resources:
## Configure Pods Security Context
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
## @param podSecurityContext.enabled Enable Whereabouts pods' Security Context
## @param podSecurityContext.fsGroupChangePolicy Set filesystem group change policy
## @param podSecurityContext.sysctls Set kernel settings using the sysctl interface
## @param podSecurityContext.supplementalGroups Set filesystem extra groups
## @param podSecurityContext.fsGroup Whereabouts pods' group ID
##
podSecurityContext:
enabled: true
fsGroupChangePolicy: Always
sysctls: []
supplementalGroups: []
fsGroup: 0
## Configure Container Security Context (only main container)
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-container
## @param containerSecurityContext.enabled Enable Whereabouts containers' Security Context
## @param containerSecurityContext.seLinuxOptions Set SELinux options in container
## @param containerSecurityContext.runAsUser Whereabouts containers' Security Context
## @param containerSecurityContext.runAsNonRoot Set Whereabouts container's Security Context runAsNonRoot
## @param containerSecurityContext.privileged Set Whereabouts container's Security Context privileged
@@ -226,6 +233,7 @@ podSecurityContext:
##
containerSecurityContext:
enabled: true
seLinuxOptions: {}
runAsUser: 0
runAsNonRoot: false
privileged: true