Remove user from managed-serviceaccount-manager chart

Signed-off-by: Tamal Saha <tamal@appscode.com>

Author: tamalsaha

apis/installer/v1alpha1/zz_generated.deepcopy.go

@@ -70,6 +70,8 @@ properties:
             type: string
           microsoft:
             type: string
+          oracle:
+            type: string
           quay:
             type: string
           weaviate:

charts/cluster-profile-manager/values.openapiv3_schema.yaml

@@ -45,20 +45,20 @@ The command removes all the Kubernetes components associated with the chart and
 
 The following table lists the configurable parameters of the `managed-serviceaccount-manager` chart and their default values.
 
-|           Parameter            |                  Description                   |                                                                                            Default                                                                                             |
-|--------------------------------|------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| nameOverride                   |                                                | <code>""</code>                                                                                                                                                                                |
-| fullnameOverride               |                                                | <code>""</code>                                                                                                                                                                                |
-| image                          | Image of the managed service-account instances | <code>ghcr.io/kluster-manager/managed-serviceaccount</code>                                                                                                                                    |
-| tag                            |                                                | <code>""</code>                                                                                                                                                                                |
-| replicas                       | Number of replicas                             | <code>1</code>                                                                                                                                                                                 |
-| securityContext                |                                                | <code>{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}}</code> |
-| featureGates.ephemeralIdentity |                                                | <code>false</code>                                                                                                                                                                             |
-| agentImagePullSecret           |                                                | <code>""</code>                                                                                                                                                                                |
-| kubeconfigSecretName           | required for multicluster controlplane         | <code>""</code>                                                                                                                                                                                |
-| addonManagerNamespace          |                                                | <code>open-cluster-management-managed-serviceaccount</code>                                                                                                                                    |
-| placement.create               |                                                | <code>true</code>                                                                                                                                                                              |
-| placement.name                 |                                                | <code>global</code>                                                                                                                                                                            |
+|           Parameter            |                  Description                   |                                                                                             Default                                                                                             |
+|--------------------------------|------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
+| nameOverride                   |                                                | <code>""</code>                                                                                                                                                                                 |
+| fullnameOverride               |                                                | <code>""</code>                                                                                                                                                                                 |
+| image                          | Image of the managed service-account instances | <code>ghcr.io/kluster-manager/managed-serviceaccount</code>                                                                                                                                     |
+| tag                            |                                                | <code>""</code>                                                                                                                                                                                 |
+| replicas                       | Number of replicas                             | <code>1</code>                                                                                                                                                                                  |
+| securityContext                |                                                | <code>{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"privileged":false,"readOnlyRootFilesystem":true,"runAsNonRoot":true,"seccompProfile":{"type":"RuntimeDefault"}}</code> |
+| featureGates.ephemeralIdentity |                                                | <code>false</code>                                                                                                                                                                              |
+| agentImagePullSecret           |                                                | <code>""</code>                                                                                                                                                                                 |
+| kubeconfigSecretName           | required for multicluster controlplane         | <code>""</code>                                                                                                                                                                                 |
+| addonManagerNamespace          |                                                | <code>open-cluster-management-managed-serviceaccount</code>                                                                                                                                     |
+| placement.create               |                                                | <code>true</code>                                                                                                                                                                               |
+| placement.name                 |                                                | <code>global</code>                                                                                                                                                                             |
 
 
 Specify each parameter using the `--set key=value[,key=value]` argument to `helm upgrade -i`. For example:

charts/managed-serviceaccount-manager/README.md

@@ -12,9 +12,9 @@ securityContext: # +doc-gen:break
   allowPrivilegeEscalation: false
   capabilities:
     drop: ["ALL"]
-  readOnlyRootFilesystem: true
+  privileged: false
   runAsNonRoot: true
-  runAsUser: 65534
+  readOnlyRootFilesystem: true
   seccompProfile:
     type: RuntimeDefault