diff --git a/mycloud-collabora/Chart.yaml b/mycloud-collabora/Chart.yaml index 32029a3..674a455 100644 --- a/mycloud-collabora/Chart.yaml +++ b/mycloud-collabora/Chart.yaml @@ -6,4 +6,4 @@ maintainers: - name: WrenIX url: https://wrenix.eu -version: 0.1.1 +version: 0.1.2 diff --git a/mycloud-collabora/README.md b/mycloud-collabora/README.md index bbfc326..3d44b64 100644 --- a/mycloud-collabora/README.md +++ b/mycloud-collabora/README.md @@ -7,7 +7,7 @@ description: "myCloud component to setup collabora" # mycloud-collabora -![Version: 0.1.1](https://img.shields.io/badge/Version-0.1.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) +![Version: 0.1.2](https://img.shields.io/badge/Version-0.1.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) myCloud component to setup collabora diff --git a/mycloud-collabora/templates/release.yaml b/mycloud-collabora/templates/release.yaml index 5d45bb3..a83281a 100644 --- a/mycloud-collabora/templates/release.yaml +++ b/mycloud-collabora/templates/release.yaml @@ -94,3 +94,26 @@ spec: {{- toYaml .Values.commons.grafana.dashboards.labels | nindent 10 }} annotations: {{- toYaml .Values.commons.grafana.dashboards.annotations | nindent 10 }} + + serviceAccount: + create: true + + podSecurityContext: + fsGroup: 100 + + securityContext: + allowPrivilegeEscalation: true + privileged: false + readOnlyRootFilesystem: false + runAsNonRoot: true + runAsUser: 100 + runAsGroup: 101 + seccompProfile: + type: "RuntimeDefault" + capabilities: + drop: + - "ALL" + add: + - "CHOWN" + - "FOWNER" + - "SYS_CHROOT"