jklein
b5eba4cbf1
Add securityContext hardening (runAsNonRoot, readOnlyRootFilesystem, capabilities drop ALL, allowPrivilegeEscalation false) to the 10 workloads that lacked it: apache-tika, cyberchef, gotenberg, homeassistant, matrix-delegation-nginx, paperless-server, paperless-consume cronjob (plus automountServiceAccountToken false), patchmon-frontend, urlaubsverwaltung and zipline. All contexts are configurable via securityContext.pod / securityContext.container in values.yaml; writable paths are provided as emptyDirs. Image-forced deviations (Home Assistant root start for s6-overlay + NET_RAW for discovery, paperless root init container for /run ownership) are documented in the charts' values.yaml. Major version bump for every changed published chart.
11 lines
186 B
YAML
11 lines
186 B
YAML
apiVersion: v2
|
|
name: gotenberg
|
|
description: A Helm chart to deploy Gotenberg on Kubernetes
|
|
|
|
type: application
|
|
|
|
version: 3.0.0+up8.26.0
|
|
appVersion: "8.26.0"
|
|
|
|
maintainers:
|
|
- name: jklein |