change: Set security context by default to restrictive values

helm/timetable/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: template
   repository: file://../template
-  version: 0.3.2
-digest: sha256:cfa91470789bc70f23902c7cbd7ca33512f918149e8d3f704122bc6cd85dce0c
-generated: "2024-01-09T21:57:03.505884+01:00"
+  version: 0.4.0
+digest: sha256:a075a598e4f3c78ef83e00df74dcce9d59423e03c658d9b5c9e6316285f0e7b7
+generated: "2024-02-04T22:26:18.289709+01:00"

helm/timetable/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: timetable
 description: Installs the Timetable backend into the Kubernetes cluster
 type: application
-version: 0.1.0
+version: 0.2.0
 maintainers:
   - name: Jim Martens
     url: https://2martens.de
@@ -10,7 +10,7 @@ sources:
   - https://github.com/2martens/tsw-timetable
 dependencies:
   - name: template
-    version: 0.3.3
+    version: 0.4.0
     repository: file://../template
 annotations:
   artifacthub.io/images: |
@@ -20,8 +20,8 @@ annotations:
         - linux/amd64
         - linux/arm64
   artifacthub.io/changes: |
-    - kind: added
-      description: Added timetable chart
+    - kind: changed
+      description: Use restrictive security context by default
   artifacthub.io/signKey: |
     fingerprint: F0F153B65BAD467201D7544E47393ABD1F96B7C8
     url: https://mafiasi.de/pks/key/47393ABD1F96B7C8.asc

helm/timetable/values.yaml

@@ -33,7 +33,13 @@ podSecurityContext: {}
 # fsGroup: 2000
 
 # Configure security context of the application container
-securityContext: {}
+securityContext:
+  seccompProfile:
+    type: RuntimeDefault
+  capabilities:
+    drop: ['ALL']
+  allowPrivilegeEscalation: false
+  readOnlyRootFilesystem: true
 #   capabilities:
 #     drop:
 #     - ALL