Merge pull request #5 from at88mph/security-fixes

fix: append security constraints for posix mapper postgres

helm/applications/posix-mapper/Chart.yaml

@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.2.0
+version: 0.2.1
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to

helm/applications/posix-mapper/templates/postgres-deploy.yaml

@@ -13,6 +13,9 @@ spec:
       labels:
         app: posix-mapper-postgres
     spec:
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
       containers:
         - name: postgres
           image: postgres:13
@@ -27,6 +30,8 @@ spec:
               name: postgresinit
             - mountPath: /var/lib/postgresql/data
               name: postgresdb
+          securityContext:
+            allowPrivilegeEscalation: false
       volumes:
         - name: postgresdb
           {{- toYaml .Values.postgresql.storage.spec | nindent 10 }}