update access-manager to 0.9.0 (#97)

Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de>

charts/access-manager/Chart.yaml

@@ -1,8 +1,8 @@
 apiVersion: v1
 description: Kubernetes-Operator to simplify RBAC configurations
 name: access-manager
-version: 0.8.1
-appVersion: 0.8.1
+version: 0.9.0
+appVersion: 0.9.0
 home: https://github.com/ckotzbauer/access-manager
 sources:
   - https://github.com/ckotzbauer/access-manager

charts/access-manager/README.md

@@ -42,7 +42,7 @@ The following table lists the configurable parameters of the Access-Manager char
 | -------------------------------------- | ------------------------------------------------- | ------------------------------------- |
 | `replicas`                             | replicas of deployment (leader-election only > 1) | `1`                                   |
 | `image.repository`                     | container image repository                        | `ghcr.io/ckotzbauer/access-manager`   |
-| `image.tag`                            | container image tag                               | `0.8.1`                               |
+| `image.tag`                            | container image tag                               | `0.9.0`                               |
 | `image.pullPolicy`                     | container image pull policy                       | `IfNotPresent`                        |
 | `nodeSelector`                         | node labels for pod assignment                    | `{}`                                  |
 | `tolerations`                          | node tolerations for pod assignment               | `[]`                                  |

charts/access-manager/values.yaml

@@ -6,7 +6,7 @@ replicas: 1
 
 image:
   repository: ghcr.io/ckotzbauer/access-manager
-  tag: 0.8.1
+  tag: 0.9.0
   pullPolicy: IfNotPresent
 
 podAnnotations: {}
@@ -23,6 +23,13 @@ securityContext:
   privileged: false
   runAsUser: 1001
   runAsNonRoot: true
+  allowPrivilegeEscalation: false
+  readOnlyRootFilesystem: true
+  seccompProfile:
+    type: RuntimeDefault
+  capabilities:
+    drop:
+      - ALL
 
 serviceAccount:
   # Specifies whether a ServiceAccount should be created