helm-charts/matrix-synapse/Chart.yaml at dfa8d3386c1112bf185f250a36147fe95bc162bc - helm-charts - JLab-Git

jlab-cluster/helm-charts

0 Fork 0

Files

T

jklein b5eba4cbf1

Harden pod and container security contexts across all workloads

Add securityContext hardening (runAsNonRoot, readOnlyRootFilesystem,
capabilities drop ALL, allowPrivilegeEscalation false) to the 10 workloads
that lacked it: apache-tika, cyberchef, gotenberg, homeassistant,
matrix-delegation-nginx, paperless-server, paperless-consume cronjob
(plus automountServiceAccountToken false), patchmon-frontend,
urlaubsverwaltung and zipline. All contexts are configurable via
securityContext.pod / securityContext.container in values.yaml; writable
paths are provided as emptyDirs. Image-forced deviations (Home Assistant
root start for s6-overlay + NET_RAW for discovery, paperless root init
container for /run ownership) are documented in the charts' values.yaml.
Major version bump for every changed published chart.

2026-08-21 21:49:05 +02:00

8 lines

206 B

YAML

Raw Blame History

 apiVersion: v2
 name: matrix-synapse
 description: A Helm chart to deploy a Matrix Synapse server on Kubernetes
 type: application
 version: 3.0.0+upv1.149.1
 appVersion: "v1.149.1"
 maintainers:
   - name: jklein