Changed: Helm: Make security context configuration overwritable

helm/core-ui-middleware/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 3.0.4
+version: 3.0.5
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
@@ -24,5 +24,5 @@ version: 3.0.4
 appVersion: "2.0.2"
 dependencies:
   - name: ox-common
-    version: ~1.0.33
+    version: ~1.0.38
     repository: "oci://registry.open-xchange.com/appsuite-core-internal/charts"

helm/core-ui-middleware/templates/deployment.yaml

@@ -19,7 +19,7 @@ spec:
     spec: {{ include "ox-common.pods.podSpec" (dict "podRoot" .Values "global" $ "context" . ) | nindent 6 }}
       containers:
         - name: main
-          securityContext: {{ toYaml .Values.securityContext | nindent 12 }}
+          {{- include "ox-common.containers.securityContext" (dict "podRoot" .Values "context" . "global" $) | nindent 10 }}
           image: {{ include "ox-common.images.image" (dict "imageRoot" .Values.image "global" $ "context" . ) }}
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           env:

helm/core-ui-middleware/templates/updater.yaml

@@ -18,7 +18,7 @@ spec:
     spec: {{ include "ox-common.pods.podSpec" (dict "podRoot" .Values "global" $ "context" . ) | nindent 6 }}
       containers:
         - name: main
-          securityContext: {{ toYaml .Values.securityContext | nindent 12 }}
+          {{- include "ox-common.containers.securityContext" (dict "podRoot" .Values "context" . "global" $) | nindent 10 }}
           image: {{ include "ox-common.images.image" (dict "imageRoot" .Values.image "global" $ "context" . ) }}
           command: ["/nodejs/bin/node", "src/updater.js"]
           imagePullPolicy: {{ .Values.image.pullPolicy }}

helm/core-ui-middleware/values.yaml

@@ -26,12 +26,16 @@ fullnameOverride: ""
 podAnnotations:
   logging.open-xchange.com/format: "appsuite-json"
 
-podSecurityContext:
+podSecurityContext: {}
+
+defaultPodSecurityContext:
   runAsNonRoot: true
   runAsUser: 1000
   runAsGroup: 1000
 
-securityContext:
+securityContext: {}
+
+defaultSecurityContext:
   runAsNonRoot: true
   runAsUser: 1000
   runAsGroup: 1000