diff --git a/charts/steampipe/Chart.yaml b/charts/steampipe/Chart.yaml index de298b4..47ca03f 100644 --- a/charts/steampipe/Chart.yaml +++ b/charts/steampipe/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: steampipe description: A Helm chart for Kubernetes to deploy Steampipe type: application -version: 1.0.1 +version: 1.1.0 appVersion: "0.20.12" home: https://github.com/devops-ia/helm-charts/tree/main/charts/steampipe sources: diff --git a/charts/steampipe/values.yaml b/charts/steampipe/values.yaml index 19eae5b..68ef63f 100644 --- a/charts/steampipe/values.yaml +++ b/charts/steampipe/values.yaml @@ -25,16 +25,14 @@ serviceAccount: podAnnotations: {} -podSecurityContext: {} - # fsGroup: 2000 +podSecurityContext: + fsGroup: 9193 + runAsGroup: 65534 + runAsUser: 9193 -securityContext: {} -# capabilities: -# drop: -# - ALL -# readOnlyRootFilesystem: true -# runAsNonRoot: true -# runAsUser: 1000 +securityContext: + runAsNonRoot: true + runAsUser: 9193 command: [] # - "steampipe" @@ -80,7 +78,7 @@ configProbe: {} db: enabled: false port: 9193 - listen: "local" + listen: "network" dashboard: enabled: false @@ -179,13 +177,9 @@ initContainer: # Overrides the image tag whose default is the chart appVersion. tag: "" - securityContext: {} - # capabilities: - # drop: - # - ALL - # readOnlyRootFilesystem: true - # runAsNonRoot: true - # runAsUser: 1000 + securityContext: + runAsNonRoot: true + runAsUser: 9193 # Ref: https://hub.steampipe.io/plugins plugins: []