Removed redundant security directives
All checks were successful
continuous-integration/publish-helm Helm publish succeeded
All checks were successful
continuous-integration/publish-helm Helm publish succeeded
removed scc anyuid (out of band)
This commit is contained in:
@@ -1,2 +0,0 @@
|
|||||||
oc create sa peanutflix-sa -n peanutflix
|
|
||||||
oc adm policy add-scc-to-user anyuid -z peanutflix-sa -n peanutflix
|
|
||||||
17
values.yaml
17
values.yaml
@@ -88,14 +88,15 @@ pms:
|
|||||||
# -- Security context for PMS pods
|
# -- Security context for PMS pods
|
||||||
securityContext: {}
|
securityContext: {}
|
||||||
|
|
||||||
containerSecurityContext:
|
# Redundant for openshift
|
||||||
runAsNonRoot: true
|
# containerSecurityContext:
|
||||||
allowPrivilegeEscalation: false
|
# runAsNonRoot: true
|
||||||
seccompProfile:
|
# allowPrivilegeEscalation: false
|
||||||
type: RuntimeDefault
|
# seccompProfile:
|
||||||
capabilities:
|
# type: RuntimeDefault
|
||||||
drop:
|
# capabilities:
|
||||||
- ALL
|
# drop:
|
||||||
|
# - ALL
|
||||||
|
|
||||||
# -- Enable process namespace sharing within the pod.
|
# -- Enable process namespace sharing within the pod.
|
||||||
shareProcessNamespace: false
|
shareProcessNamespace: false
|
||||||
|
|||||||
Reference in New Issue
Block a user