From 6f7650dd2211c93cfdcac26ae108c60af26cca86 Mon Sep 17 00:00:00 2001 From: Christian Kotzbauer Date: Tue, 29 Mar 2022 13:23:56 +0200 Subject: [PATCH] update access-manager to 0.9.0 (#97) Signed-off-by: Christian Kotzbauer --- charts/access-manager/Chart.yaml | 4 ++-- charts/access-manager/README.md | 2 +- charts/access-manager/values.yaml | 9 ++++++++- 3 files changed, 11 insertions(+), 4 deletions(-) diff --git a/charts/access-manager/Chart.yaml b/charts/access-manager/Chart.yaml index 65ce29f..0ac5085 100644 --- a/charts/access-manager/Chart.yaml +++ b/charts/access-manager/Chart.yaml @@ -1,8 +1,8 @@ apiVersion: v1 description: Kubernetes-Operator to simplify RBAC configurations name: access-manager -version: 0.8.1 -appVersion: 0.8.1 +version: 0.9.0 +appVersion: 0.9.0 home: https://github.com/ckotzbauer/access-manager sources: - https://github.com/ckotzbauer/access-manager diff --git a/charts/access-manager/README.md b/charts/access-manager/README.md index 1141ee5..f386fcb 100644 --- a/charts/access-manager/README.md +++ b/charts/access-manager/README.md @@ -42,7 +42,7 @@ The following table lists the configurable parameters of the Access-Manager char | -------------------------------------- | ------------------------------------------------- | ------------------------------------- | | `replicas` | replicas of deployment (leader-election only > 1) | `1` | | `image.repository` | container image repository | `ghcr.io/ckotzbauer/access-manager` | -| `image.tag` | container image tag | `0.8.1` | +| `image.tag` | container image tag | `0.9.0` | | `image.pullPolicy` | container image pull policy | `IfNotPresent` | | `nodeSelector` | node labels for pod assignment | `{}` | | `tolerations` | node tolerations for pod assignment | `[]` | diff --git a/charts/access-manager/values.yaml b/charts/access-manager/values.yaml index dd16b43..9d83859 100644 --- a/charts/access-manager/values.yaml +++ b/charts/access-manager/values.yaml @@ -6,7 +6,7 @@ replicas: 1 image: repository: ghcr.io/ckotzbauer/access-manager - tag: 0.8.1 + tag: 0.9.0 pullPolicy: IfNotPresent podAnnotations: {} @@ -23,6 +23,13 @@ securityContext: privileged: false runAsUser: 1001 runAsNonRoot: true + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + seccompProfile: + type: RuntimeDefault + capabilities: + drop: + - ALL serviceAccount: # Specifies whether a ServiceAccount should be created