change: Set security context by default to restrictive values

helm/kafka/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: prometheus-kafka-exporter
   repository: https://prometheus-community.github.io/helm-charts
-  version: 2.7.0
+  version: 2.8.0
 - name: template
   repository: file://../template
-  version: 0.2.1
-digest: sha256:e2d21f00281477823de1fc72ad0b9808011ff26e5ef1240d2d575c74d614741c
-generated: "2023-11-04T12:36:40.309371+01:00"
+  version: 0.4.0
+digest: sha256:99270b2900ea5d87d9ae01c8e88be33ccfb0d69e222f6a062860a16a69439d57
+generated: "2024-02-04T22:21:56.940604+01:00"

helm/kafka/Chart.yaml

@@ -2,21 +2,21 @@ apiVersion: v2
 name: kafka
 description: Simple Kafka chart to get started
 type: application
-version: 0.1.7
+version: 0.2.0
 maintainers:
   - name: Jim Martens
     url: https://2martens.de
 dependencies:
   - name: prometheus-kafka-exporter
-    version: 2.7.0
+    version: 2.8.0
     repository: https://prometheus-community.github.io/helm-charts
   - name: template
-    version: 0.2.1
+    version: 0.4.0
     repository: file://../template
 annotations:
   artifacthub.io/changes: |
     - kind: changed
-      description: Updated template chart version
+      description: Use restrictive security context by default
   artifacthub.io/signKey: |
     fingerprint: F0F153B65BAD467201D7544E47393ABD1F96B7C8
     url: https://mafiasi.de/pks/key/47393ABD1F96B7C8.asc

helm/kafka/values.yaml

@@ -33,7 +33,13 @@ podSecurityContext: {}
 # fsGroup: 2000
 
 # Configure security context of the application container
-securityContext: {}
+securityContext:
+  seccompProfile:
+    type: RuntimeDefault
+  capabilities:
+    drop: ['ALL']
+  allowPrivilegeEscalation: false
+  readOnlyRootFilesystem: true
 #   capabilities:
 #     drop:
 #     - ALL