Add recommendation for securityContext and podSecurityContext (#125)

Co-authored-by: Marco Franssen <[email protected]>
2023-12-19 11:26:26 +00:00
parent 50c4ac35b0
commit 6997d6a904
21 changed files with 106 additions and 157 deletions
@@ -59,11 +59,11 @@ spec:
      restartPolicy: Never
      serviceAccountName: {{ include "spire-server.serviceAccountName" . }}-post-upgrade
      securityContext:
-        {{- toYaml .Values.podSecurityContext | nindent 8 }}
+        {{- include "spire-lib.podsecuritycontext" . | nindent 8 }}
      containers:
      - name: post-upgrade-job
        securityContext:
-          {{- toYaml .Values.securityContext | nindent 10 }}
+          {{- include "spire-lib.securitycontext" . | nindent 10 }}
        image: {{ template "spire-lib.kubectl-image" (dict "appVersion" $.Chart.AppVersion "image" .Values.tools.kubectl.image "global" .Values.global "KubeVersion" .Capabilities.KubeVersion.Version) }}
        args:
          - patch