fix: use hardcoded values to fix quoting issue

2024-07-22 11:02:52 +00:00 · 2024-07-22 11:02:52 +00:00 · 6a77aa897a
commit 6a77aa897a
parent bddab195f5
1 changed files with 8 additions and 1 deletions
--- a/charts/kubezero-argo/values.yaml
+++ b/charts/kubezero-argo/values.yaml
@ -152,7 +152,14 @@ argo-cd:
        - mountPath: /home/argocd/.kube
          name: kubeconfigs
        securityContext:
-          '{{- toYaml .Values.repoServer.containerSecurityContext | nindent 4 }}'
+          runAsNonRoot: true
+          readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
+          seccompProfile:
+            type: RuntimeDefault
+          capabilities:
+            drop:
+            - ALL

  server:
    # Rename former https port to grpc, works with istio + insecure