chore: update securityContext (#99)

eclipse-tractusx · Feb 23, 2024 · 0fda15d · 0fda15d
1 parent 7d2a4bd
commit 0fda15d
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 5 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -11,6 +11,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 - Updated default imagePullPolicy
 - Updated probes in values file so that it can be configurable
 - Updated ARC42 document notice section
+- Updated security context
 
 ## [2.1.9] - 2024-01-30
 

diff --git a/charts/sdfactory/values.yaml b/charts/sdfactory/values.yaml
@@ -52,14 +52,14 @@ podSecurityContext:
   fsGroup: 2000
 
 securityContext:
-    # -- Controls whether a process can gain more privileges
+  capabilities:
+    drop:
+      - ALL
   allowPrivilegeEscalation: false
-  # capabilities:
-  #   drop:
-  #   - ALL
   # readOnlyRootFilesystem: true
-  # runAsNonRoot: true
+  runAsNonRoot: true
   runAsUser: 1000
+  runAsGroup: 1000
 
 sdfactory:
   secret: