diff --git a/helm/core-ui-middleware/Chart.yaml b/helm/core-ui-middleware/Chart.yaml index c427ce140e1742f078dc8d895bc477777ad27347..a82ee169ccd89a190a526dc3a06e69b7d47789f7 100644 --- a/helm/core-ui-middleware/Chart.yaml +++ b/helm/core-ui-middleware/Chart.yaml @@ -15,7 +15,7 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 3.0.4 +version: 3.0.5 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to @@ -24,5 +24,5 @@ version: 3.0.4 appVersion: "2.0.2" dependencies: - name: ox-common - version: ~1.0.33 + version: ~1.0.38 repository: "oci://registry.open-xchange.com/appsuite-core-internal/charts" diff --git a/helm/core-ui-middleware/templates/deployment.yaml b/helm/core-ui-middleware/templates/deployment.yaml index 16341767de388326bd9439dc64eca3cd3fcddfec..1574374a841ffed7856e248664591ae328bfa925 100644 --- a/helm/core-ui-middleware/templates/deployment.yaml +++ b/helm/core-ui-middleware/templates/deployment.yaml @@ -19,7 +19,7 @@ spec: spec: {{ include "ox-common.pods.podSpec" (dict "podRoot" .Values "global" $ "context" . ) | nindent 6 }} containers: - name: main - securityContext: {{ toYaml .Values.securityContext | nindent 12 }} + {{- include "ox-common.containers.securityContext" (dict "podRoot" .Values "context" . "global" $) | nindent 10 }} image: {{ include "ox-common.images.image" (dict "imageRoot" .Values.image "global" $ "context" . ) }} imagePullPolicy: {{ .Values.image.pullPolicy }} env: diff --git a/helm/core-ui-middleware/templates/updater.yaml b/helm/core-ui-middleware/templates/updater.yaml index c53ba9208a5ad54a076ad425ee70532a176630e3..b71741e5b07aff375f143856f401f1112286cc9d 100644 --- a/helm/core-ui-middleware/templates/updater.yaml +++ b/helm/core-ui-middleware/templates/updater.yaml @@ -18,7 +18,7 @@ spec: spec: {{ include "ox-common.pods.podSpec" (dict "podRoot" .Values "global" $ "context" . ) | nindent 6 }} containers: - name: main - securityContext: {{ toYaml .Values.securityContext | nindent 12 }} + {{- include "ox-common.containers.securityContext" (dict "podRoot" .Values "context" . "global" $) | nindent 10 }} image: {{ include "ox-common.images.image" (dict "imageRoot" .Values.image "global" $ "context" . ) }} command: ["/nodejs/bin/node", "src/updater.js"] imagePullPolicy: {{ .Values.image.pullPolicy }} diff --git a/helm/core-ui-middleware/values.yaml b/helm/core-ui-middleware/values.yaml index c1a5773c456858251fba6c5147bab829e39a87fd..744916362deb358cf7e300870aa5d21898dc935d 100644 --- a/helm/core-ui-middleware/values.yaml +++ b/helm/core-ui-middleware/values.yaml @@ -26,12 +26,16 @@ fullnameOverride: "" podAnnotations: logging.open-xchange.com/format: "appsuite-json" -podSecurityContext: +podSecurityContext: {} + +defaultPodSecurityContext: runAsNonRoot: true runAsUser: 1000 runAsGroup: 1000 -securityContext: +securityContext: {} + +defaultSecurityContext: runAsNonRoot: true runAsUser: 1000 runAsGroup: 1000