Implemented securityContext within api-mapper

glenndehaan · Jan 30, 2024 · 1446686 · 1446686
1 parent 8df2c3b
commit 1446686
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 10 deletions.
diff --git a/charts/api-mapper/Chart.yaml b/charts/api-mapper/Chart.yaml
@@ -24,7 +24,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.1.0
+version: 1.2.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

diff --git a/charts/api-mapper/README.md b/charts/api-mapper/README.md
@@ -1,6 +1,6 @@
 # api-mapper
 
-![Version: 1.1.0](https://img.shields.io/badge/Version-1.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: latest](https://img.shields.io/badge/AppVersion-latest-informational?style=flat-square)
+![Version: 1.2.0](https://img.shields.io/badge/Version-1.2.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: latest](https://img.shields.io/badge/AppVersion-latest-informational?style=flat-square)
 
 A Helm chart for deploying the API Mapper
 
@@ -38,7 +38,7 @@ A Helm chart for deploying the API Mapper
 | replicaCount | int | `1` | Number of API Mapper replicas to deploy |
 | resources | object | `{"limits":{"memory":"150Mi"},"requests":{"memory":"150Mi"}}` | Resources for pods. Evaluated as a template. |
 | revisionHistoryLimit | int | `1` | Number of API Mapper revisions to keep |
-| securityContext | object | `{}` | Security Context for API Mapper |
+| securityContext | object | `{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true}` | Security Context for API Mapper |
 | service.port | int | `3000` | Service HTTP port |
 | service.type | string | `"ClusterIP"` | Service type |
 | serviceAccount.annotations | object | `{}` | Annotations to add to the service account |

diff --git a/charts/api-mapper/values.yaml b/charts/api-mapper/values.yaml
@@ -39,13 +39,13 @@ podSecurityContext: {}
   # fsGroup: 2000
 
 # -- Security Context for API Mapper
-securityContext: {}
-  # capabilities:
-  #   drop:
-  #   - ALL
-  # readOnlyRootFilesystem: true
-  # runAsNonRoot: true
-  # runAsUser: 1000
+securityContext:
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+      - ALL
+  privileged: false
+  readOnlyRootFilesystem: true
 
 service:
   # -- Service type