added security context

acdh-oeaw · Nov 27, 2023 · 21c7d7d · 21c7d7d
1 parent f5064c9
commit 21c7d7d
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/chart/templates/cronjob.yaml b/chart/templates/cronjob.yaml
@@ -156,5 +156,9 @@ items:
               volumeMounts:
               {{ toYaml $jobConfig.extraVolumeMounts | nindent 16 }}
               {{- end }}
+              {{- if $jobConfig.securityContext }}
+              securityContext:
+              {{ toYaml $jobConfig.securityContext | nindent 16 }}
+              {{- end }}
 {{- end -}}
 {{- end -}}
diff --git a/chart/values.yaml b/chart/values.yaml
@@ -78,6 +78,13 @@ cronjobs:
         persistentVolumeClaim:
           claimName: "openatlas-backup"
          # storageClass: "backup"
+    securityContext:
+      runAsNonRoot: false
+      readOnlyRootFilesystem: false
+      capabilities: { }
+      privileged: false
+      allowPrivilegeEscalation: false
+      runAsUser: 0
 
 storage:
   export: