diff --git a/charts/vaas/values.yaml b/charts/vaas/values.yaml index a1917a0..a4b8119 100644 --- a/charts/vaas/values.yaml +++ b/charts/vaas/values.yaml @@ -160,6 +160,8 @@ gateway: drop: ["ALL"] seccompProfile: type: RuntimeDefault + runAsUser: 1001 + runAsGroup: 1001 image: repository: ghcr.io/gdatasoftwareag/vaas/gateway pullPolicy: Always @@ -211,6 +213,8 @@ gdscan: drop: ["ALL"] seccompProfile: type: RuntimeDefault + runAsUser: 1001 + runAsGroup: 1001 terminationGracePeriodSeconds: 30 nameOverride: "" @@ -283,6 +287,8 @@ gdscan: drop: ["ALL"] seccompProfile: type: RuntimeDefault + runAsUser: 1000 + runAsGroup: 1000 podAnnotations: {} enabled: true # every hour @@ -317,6 +323,8 @@ redis: podSecurityContext: enabled: true fsGroup: 1654 + fsGroupChangePolicy: "OnRootMismatch" + fsGroup: 1001 containerSecurityContext: enabled: true readOnlyRootFilesystem: true @@ -326,5 +334,7 @@ redis: drop: ["ALL"] seccompProfile: type: RuntimeDefault + runAsUser: 1001 + runAsGroup: 1001 networkPolicy: enabled: true