Add recommendation for securityContext and podSecurityContext (#125)

Co-authored-by: Marco Franssen <[email protected]>
2023-12-19 11:26:26 +00:00
parent 50c4ac35b0
commit 6997d6a904
21 changed files with 106 additions and 157 deletions
@@ -14,34 +14,3 @@ global:
          pod-security.kubernetes.io/enforce: privileged
          pod-security.kubernetes.io/warn: privileged
          pod-security.kubernetes.io/audit: privileged
-
-spire-server:
-  podSecurityContext:
-    # These are unset so that openshift can automatically assign its own restricted uids to the pods
-    runAsUser: null
-    runAsGroup: null
-    fsGroup: null
-
-spire-agent:
-  podSecurityContext:
-    runAsUser: null
-    runAsGroup: null
-    fsGroup: null
-
-upstream-spire-agent:
-  podSecurityContext:
-    runAsUser: null
-    runAsGroup: null
-    fsGroup: null
-
-spiffe-oidc-discovery-provider:
-  podSecurityContext:
-    runAsUser: null
-    runAsGroup: null
-    fsGroup: null
-
-tornjak-frontend:
-  podSecurityContext:
-    runAsUser: null
-    runAsGroup: null
-    fsGroup: null