undid security and emptydir

values.yaml

@@ -89,14 +89,14 @@ pms:
   securityContext: {}
 
   # Redundant for openshift
-  #  containerSecurityContext:
+  containerSecurityContext:
-  #    runAsNonRoot: true
+    runAsNonRoot: true
-  #    allowPrivilegeEscalation: false
+    allowPrivilegeEscalation: false
-  #    seccompProfile:
+    seccompProfile:
-  #      type: RuntimeDefault
+      type: RuntimeDefault
-  #    capabilities:
+    capabilities:
-  #      drop:
+      drop:
-  #        - ALL
+        - ALL
 
   # -- Enable process namespace sharing within the pod.
   shareProcessNamespace: false
@@ -307,8 +307,8 @@ extraVolumeMounts:
   # extraVolumeMounts:
   - name: dev-dri
     mountPath: /dev/dri
-  - name: s6-run
+  #- name: s6-run
-    mountPath: /var/run/s6
+  #  mountPath: /var/run/s6
   - name: pms
     mountPath: /mnt/nfs
 
@@ -322,8 +322,8 @@ extraVolumes:
   - name: pms
     persistentVolumeClaim:
       claimName: plex
-  - name: s6-run
+  #- name: s6-run
-    emptyDir: {}
+  #  emptyDir: {}
 
 extraContainers: []
 # extraContainers: