Merge pull request #6523 from blanchardma/chore/securityContext

chore(helm): enhance securityContext
kubernetes · Sep 24, 2024 · 5e1d752 · 5e1d752
2 parents a98d199 + a0a475c
commit 5e1d752
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/charts/cluster-autoscaler/Chart.yaml b/charts/cluster-autoscaler/Chart.yaml
@@ -11,4 +11,4 @@ name: cluster-autoscaler
 sources:
   - https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler
 type: application
-version: 9.39.0
+version: 9.39.1
diff --git a/charts/cluster-autoscaler/values.yaml b/charts/cluster-autoscaler/values.yaml
@@ -140,9 +140,11 @@ clusterAPIWorkloadKubeconfigPath: /etc/kubernetes/value
 
 # containerSecurityContext -- [Security context for container](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)
 containerSecurityContext: {}
+  # allowPrivilegeEscalation: false
   # capabilities:
   #   drop:
   #   - ALL
+  # readOnlyRootFilesystem: true
 
 deployment:
   # deployment.annotations -- Annotations to add to the Deployment object.
@@ -352,8 +354,10 @@ revisionHistoryLimit: 10
 # securityContext -- [Security context for pod](https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)
 securityContext: {}
   # runAsNonRoot: true
-  # runAsUser: 1001
-  # runAsGroup: 1001
+  # runAsUser: 65534
+  # runAsGroup: 65534
+  # seccompProfile:
+  #    type: RuntimeDefault
 
 service:
   # service.create -- If `true`, a Service will be created.