fix: harden sheaft chart security context

a-a-k · a-a-k · commit befde5abe763 · 2026-05-01T01:14:58.000+03:00
diff --git a/charts/sheaft/values.yaml b/charts/sheaft/values.yaml
@@ -67,8 +67,17 @@ metrics:
 env: []
 envFrom: []
 resources: {}
-podSecurityContext: {}
-securityContext: {}
+podSecurityContext:
+  fsGroup: 65532
+securityContext:
+  runAsNonRoot: true
+  runAsUser: 65532
+  runAsGroup: 65532
+  allowPrivilegeEscalation: false
+  readOnlyRootFilesystem: true
+  capabilities:
+    drop:
+      - ALL
 podAnnotations: {}
 imagePullSecrets: []
 extraVolumes: []
