Skip to content

Update security context defaults to comply with restricted pod securi…#1981

Open
dakr0013 wants to merge 1 commit into
bitnami:mainfrom
dakr0013:main
Open

Update security context defaults to comply with restricted pod securi…#1981
dakr0013 wants to merge 1 commit into
bitnami:mainfrom
dakr0013:main

Conversation

@dakr0013

@dakr0013 dakr0013 commented Jun 5, 2026

Copy link
Copy Markdown

Description of the change

Updates the chart's default security context to comply with the Kubernetes restricted Pod Security Standard (see Kuberntes Doc:

  • podSecurityContext.seccompProfile.type is now set to RuntimeDefault (pod-level).
  • containerSecurityContext.allowPrivilegeEscalation is now set to false (container-level).

Benefits

  • Pods deployed with default values now satisfy the restricted Pod Security Standard, so the chart installs cleanly into namespaces enforcing pod-security.kubernetes.io/enforce: restricted without extra overrides.

Possible drawbacks

Applicable issues

  • fixes #

Additional information

…ty standard profile

Signed-off-by: Kronhardt, David <kronhardt@juris.de>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant