helm-charts/urlaubsverwaltung/Chart.yaml at ad4d4c492d9be2fc89ee02bbfdd226d03a1a7fc4 - helm-charts - JLab-Git

jlab-cluster/helm-charts

0 Fork 0

Files

T

jklein b5eba4cbf1

Harden pod and container security contexts across all workloads

Add securityContext hardening (runAsNonRoot, readOnlyRootFilesystem,
capabilities drop ALL, allowPrivilegeEscalation false) to the 10 workloads
that lacked it: apache-tika, cyberchef, gotenberg, homeassistant,
matrix-delegation-nginx, paperless-server, paperless-consume cronjob
(plus automountServiceAccountToken false), patchmon-frontend,
urlaubsverwaltung and zipline. All contexts are configurable via
securityContext.pod / securityContext.container in values.yaml; writable
paths are provided as emptyDirs. Image-forced deviations (Home Assistant
root start for s6-overlay + NET_RAW for discovery, paperless root init
container for /run ownership) are documented in the charts' values.yaml.
Major version bump for every changed published chart.

2026-08-21 21:49:05 +02:00

8 lines

167 B

YAML

Raw Blame History

 apiVersion: v2
 name: urlaubsverwaltung
 description: A Helm chart to deploy urlaubsverwaltung on Kubernetes
 type: application
 version: 3.0.0+up6.5.0
 appVersion: 6.5.0