fix(helm): add securityContext to nats pods

fabriziosestito · fabriziosestito · commit d527b90448a1 · 2025-05-29T20:18:55.000+02:00
Signed-off-by: Fabrizio Sestito &lt;fabrizio.sestito@suse.com&gt;
diff --git a/helm/values.yaml b/helm/values.yaml
@@ -34,6 +34,30 @@ nats:
       enabled: true
   natsBox:
     enabled: false
+  container:
+    merge:
+      securityContext:
+        readOnlyRootFilesystem: true
+        runAsNonRoot: true
+        runAsUser: 65532
+        seccompProfile:
+            type: RuntimeDefault
+        allowPrivilegeEscalation: false
+        capabilities:
+            drop:
+            - "ALL"
+  reloader:
+    merge:
+      securityContext:
+        readOnlyRootFilesystem: true
+        runAsNonRoot: true
+        runAsUser: 65532
+        seccompProfile:
+            type: RuntimeDefault
+        allowPrivilegeEscalation: false
+        capabilities:
+            drop:
+            - "ALL"
 
 persistence:
   enabled: true
