[PAGOPA-2654] feat: Update security context helm

pagopa · Feb 12, 2025 · 8223061 · 8223061
1 parent 2c50b91
commit 8223061
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 8 deletions.
diff --git a/helm/values-dev.yaml b/helm/values-dev.yaml
@@ -65,7 +65,9 @@ microservice-chart:
     seccompProfile:
       type: RuntimeDefault
   securityContext:
-    allowPrivilegeEscalation: false
+    capabilities:
+      add:
+        - NET_BIND_SERVICE
   resources:
     requests:
       memory: "256Mi"

diff --git a/helm/values-prod.yaml b/helm/values-prod.yaml
@@ -1,7 +1,7 @@
 microservice-chart:
   namespace: "fdr"
   nameOverride: ""
-  fullnameOverride: ""
+  fullnameOverride: "pagopa-fdr-2-event-hub"
   image:
     repository: ghcr.io/pagopa/pagopa-fdr-2-event-hub
     tag: "0.0.2-11-PAGOPA-2645-tuning-fdr-to-eventhub"
@@ -57,15 +57,17 @@ microservice-chart:
     path: /pagopa-fdr-to-event-hub-service/(.*)
     servicePort: 80
   serviceAccount:
-    create: false
-    annotations: {}
-    name: ""
+    name: "fdr-workload-identity"
+  azure:
+    workloadIdentityClientId: <workload-identity-client-id-set-automatically-by-gha>
   podAnnotations: {}
   podSecurityContext:
     seccompProfile:
       type: RuntimeDefault
   securityContext:
-    allowPrivilegeEscalation: false
+    capabilities:
+      add:
+        - NET_BIND_SERVICE
   resources:
     requests:
       memory: "768Mi"

diff --git a/helm/values-uat.yaml b/helm/values-uat.yaml
@@ -1,7 +1,7 @@
 microservice-chart:
   namespace: "fdr"
   nameOverride: ""
-  fullnameOverride: ""
+  fullnameOverride: "pagopa-fdr-2-event-hub"
   image:
     repository: ghcr.io/pagopa/pagopa-fdr-2-event-hub
     tag: "0.0.2-11-PAGOPA-2645-tuning-fdr-to-eventhub"
@@ -65,7 +65,9 @@ microservice-chart:
     seccompProfile:
       type: RuntimeDefault
   securityContext:
-    allowPrivilegeEscalation: false
+    capabilities:
+      add:
+        - NET_BIND_SERVICE
   resources:
     requests:
       memory: "768Mi"