Merge pull request #50 from ksangers/main

Improve container security
jouve · May 13, 2024 · 4375708 · 4375708
2 parents a2ef882 + 4d9bd9a
commit 4375708
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 2 deletions.
diff --git a/charts/mailpit/Chart.yaml b/charts/mailpit/Chart.yaml
@@ -3,8 +3,8 @@ name: mailpit
 description: An email and SMTP testing tool with API for developers
 icon: https://raw.githubusercontent.com/axllent/mailpit/develop/server/ui/mailpit.svg
 type: application
-version: 0.17.1
-appVersion: 1.17.1
+version: 0.17.2
+appVersion: 1.17.2
 dependencies:
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts

diff --git a/charts/mailpit/values.yaml b/charts/mailpit/values.yaml
@@ -84,10 +84,15 @@ podSecurityContext:
 ##
 containerSecurityContext:
   allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+      - ALL
   runAsUser: 1001
   runAsGroup: 1001
   runAsNonRoot: true
   readOnlyRootFilesystem: true
+  seccompProfile:
+    type: RuntimeDefault
 
 ## @param replicaCount Number of replicas to deploy
 ##