update

Signed-off-by: Md. Istiak <mdistiak@appscode.com>

Author: Istiak2019331114

charts/service-gateway-presets/README.md

@@ -110,6 +110,17 @@ The following table lists the configurable parameters of the `service-gateway-pr
 | chart.sourceRef.kind                               |                                                                | <code>HelmRepository</code>                                                                                                                                                                                       |
 | chart.sourceRef.name                               |                                                                | <code>appscode-charts-oci</code>                                                                                                                                                                                  |
 | chart.sourceRef.namespace                          |                                                                | <code>kubeops</code>                                                                                                                                                                                              |
+| cleaner.enabled                                    |                                                                | <code>true</code>                                                                                                                                                                                                 |
+| cleaner.registry                                   |                                                                | <code>ghcr.io/appscode</code>                                                                                                                                                                                     |
+| cleaner.repository                                 |                                                                | <code>kubectl-nonroot</code>                                                                                                                                                                                      |
+| cleaner.tag                                        |                                                                | <code>"1.34"</code>                                                                                                                                                                                               |
+| cleaner.pullPolicy                                 |                                                                | <code>IfNotPresent</code>                                                                                                                                                                                         |
+| cleaner.securityContext.allowPrivilegeEscalation   |                                                                | <code>false</code>                                                                                                                                                                                                |
+| cleaner.securityContext.privileged                 |                                                                | <code>false</code>                                                                                                                                                                                                |
+| cleaner.securityContext.readOnlyRootFilesystem     |                                                                | <code>true</code>                                                                                                                                                                                                 |
+| cleaner.securityContext.runAsNonRoot               |                                                                | <code>true</code>                                                                                                                                                                                                 |
+| cleaner.securityContext.runAsUser                  |                                                                | <code>65534</code>                                                                                                                                                                                                |
+| cleaner.securityContext.seccompProfile.type        |                                                                | <code>RuntimeDefault</code>                                                                                                                                                                                       |
 
 
 Specify each parameter using the `--set key=value[,key=value]` argument to `helm upgrade -i`. For example:

charts/service-gateway-presets/values.yaml

@@ -151,3 +151,20 @@ chart:
     kind: HelmRepository
     name: appscode-charts-oci
     namespace: kubeops
+
+cleaner:
+  enabled: true
+  registry: ghcr.io/appscode
+  repository: kubectl-nonroot
+  tag: "1.34"
+  pullPolicy: IfNotPresent
+  securityContext:
+    allowPrivilegeEscalation: false
+    capabilities:
+      drop: ["ALL"]
+    privileged: false
+    readOnlyRootFilesystem: true
+    runAsNonRoot: true
+    runAsUser: 65534
+    seccompProfile:
+      type: RuntimeDefault

charts/service-gateway/README.md

@@ -104,7 +104,7 @@ The following table lists the configurable parameters of the `service-gateway` c
 | echoserver.securityContext                         |                                                                    | <code>{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}}</code> |
 | vaultServer.name                                   | Vault server name that exist on cluster                            | <code>"vault"</code>                                                                                                                                                                                              |
 | vaultServer.namespace                              | Vault server namespace that exist on cluster                       | <code>"ace"</code>                                                                                                                                                                                                |
-| cleaner.enabled                                    |                                                                    | <code>false</code>                                                                                                                                                                                                |
+| cleaner.enabled                                    |                                                                    | <code>true</code>                                                                                                                                                                                                 |
 | cleaner.registry                                   |                                                                    | <code>ghcr.io/appscode</code>                                                                                                                                                                                     |
 | cleaner.repository                                 |                                                                    | <code>kubectl-nonroot</code>                                                                                                                                                                                      |
 | cleaner.tag                                        |                                                                    | <code>"1.34"</code>                                                                                                                                                                                               |

charts/service-gateway/values.yaml

@@ -149,7 +149,7 @@ vaultServer:
 # Disabled by default. Enable when the envoy-gateway controller is deployed as a sub-chart
 # and shuts down before it can remove the finalizer.
 cleaner:
-  enabled: false
+  enabled: true
   registry: ghcr.io/appscode
   repository: kubectl-nonroot
   tag: "1.34"