feat: upgrade version and increase security

restinthemiddle · Aug 3, 2023 · 303ac29 · 303ac29
1 parent cc3e940
commit 303ac29
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 7 deletions.
diff --git a/charts/restinthemiddle/Chart.yaml b/charts/restinthemiddle/Chart.yaml
@@ -2,4 +2,4 @@ apiVersion: v2
 name: restinthemiddle
 description: Deploy the HTTP logging proxy with ease
 type: application
-version: 0.7.2
+version: 0.8.0
diff --git a/charts/restinthemiddle/README.md b/charts/restinthemiddle/README.md
@@ -1,6 +1,6 @@
 # restinthemiddle
 
-![Version: 0.7.2](https://img.shields.io/badge/Version-0.7.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
+![Version: 0.8.0](https://img.shields.io/badge/Version-0.8.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
 
 Deploy the HTTP logging proxy with ease
 
@@ -29,7 +29,7 @@ Deploy the HTTP logging proxy with ease
 | image.pullPolicy | string | `"IfNotPresent"` |  |
 | image.registry | string | `"docker.io"` |  |
 | image.repository | string | `"jdschulze/restinthemiddle"` |  |
-| image.tag | string | `"2.0.0-alpha.14"` | Restinthemiddle container image tag |
+| image.tag | string | `"2.0.0-alpha.15"` | Restinthemiddle container image tag |
 | imagePullSecrets | list | `[]` |  |
 | ingress.annotations | object | `{}` |  |
 | ingress.className | string | `""` |  |
@@ -43,9 +43,12 @@ Deploy the HTTP logging proxy with ease
 | nodeSelector | object | `{}` |  |
 | podAnnotations | object | `{}` |  |
 | podLabels | object | `{}` |  |
-| podSecurityContext | object | `{}` |  |
+| podSecurityContext.fsGroup | int | `1000` |  |
+| podSecurityContext.runAsGroup | int | `1000` |  |
+| podSecurityContext.runAsUser | int | `1000` |  |
 | replicaCount | int | `1` | Leave this at 1 if you do not have centralized logging. |
 | resources | object | `{"limits":{"cpu":"100m","memory":"64Mi"},"requests":{"cpu":"10m","memory":"32Mi"}}` | Adjust those values to your needs. These values are only suggestions! |
+| securityContext.allowPrivilegeEscalation | bool | `false` |  |
 | securityContext.capabilities.drop[0] | string | `"ALL"` |  |
 | securityContext.readOnlyRootFilesystem | bool | `true` |  |
 | securityContext.runAsGroup | int | `1000` |  |

diff --git a/charts/restinthemiddle/values.yaml b/charts/restinthemiddle/values.yaml
@@ -6,7 +6,7 @@ image:
   repository: jdschulze/restinthemiddle
   pullPolicy: IfNotPresent
   # -- Restinthemiddle container image tag
-  tag: "2.0.0-alpha.14"
+  tag: "2.0.0-alpha.15"
 
 imagePullSecrets: []
 
@@ -45,10 +45,13 @@ podAnnotations: {}
 
 podLabels: {}
 
-podSecurityContext: {}
-#  fsGroup: 2000
+podSecurityContext:
+  fsGroup: 1000
+  runAsUser: 1000
+  runAsGroup: 1000
 
 securityContext:
+  allowPrivilegeEscalation: false
   capabilities:
     drop:
       - ALL