fix: update keys in mongo secret

omrozowicz-splunk · omrozowicz-splunk · commit 73860a950cf6 · 2025-12-08T13:24:57.000+01:00
diff --git a/charts/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml b/charts/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml
@@ -64,12 +64,12 @@ spec:
             valueFrom:
               secretKeyRef:
                 name: {{ .Values.mongodb.auth.existingSecret }}
-                key: {{ .Values.mongodb.auth.rootUserKey | quote | default "root-user" }}
+                key: {{ .Values.mongodb.auth.rootUserKey | default "root-user" | quote }}
           - name: MONGO_INITDB_ROOT_PASSWORD
             valueFrom:
               secretKeyRef:
                 name: {{ .Values.mongodb.auth.existingSecret }}
-                key: {{ .Values.mongodb.auth.rootPasswordKey | quote | default "root-password" }}
+                key: {{ .Values.mongodb.auth.rootPasswordKey | default "root-password" | quote }}
           {{- else }}
           - name: MONGO_INITDB_ROOT_USERNAME
             valueFrom:
diff --git a/rendered/manifests/tests/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml b/rendered/manifests/tests/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml
@@ -21,13 +21,33 @@ spec:
         app: release-name-mongodb
         mode: standalone
     spec:
+      securityContext:
+        enabled: true
+        fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
 
       initContainers:
 
       containers:
       - name: mongodb
-        image: "mongo:7.0"
+        image: "mongo:8.2.2"
         imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          enabled: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
 
         ports:
         - containerPort: 27017
diff --git a/rendered/manifests/tests_autoscaling_enabled/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml b/rendered/manifests/tests_autoscaling_enabled/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml
@@ -21,13 +21,33 @@ spec:
         app: release-name-mongodb
         mode: standalone
     spec:
+      securityContext:
+        enabled: true
+        fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
 
       initContainers:
 
       containers:
       - name: mongodb
-        image: "mongo:7.0"
+        image: "mongo:8.2.2"
         imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          enabled: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
 
         ports:
         - containerPort: 27017
diff --git a/rendered/manifests/tests_autoscaling_enabled_deprecated/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml b/rendered/manifests/tests_autoscaling_enabled_deprecated/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml
@@ -21,13 +21,33 @@ spec:
         app: release-name-mongodb
         mode: standalone
     spec:
+      securityContext:
+        enabled: true
+        fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
 
       initContainers:
 
       containers:
       - name: mongodb
-        image: "mongo:7.0"
+        image: "mongo:8.2.2"
         imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          enabled: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
 
         ports:
         - containerPort: 27017
diff --git a/rendered/manifests/tests_enable_ui/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml b/rendered/manifests/tests_enable_ui/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml
@@ -21,13 +21,33 @@ spec:
         app: release-name-mongodb
         mode: standalone
     spec:
+      securityContext:
+        enabled: true
+        fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
 
       initContainers:
 
       containers:
       - name: mongodb
-        image: "mongo:7.0"
+        image: "mongo:8.2.2"
         imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          enabled: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
 
         ports:
         - containerPort: 27017
diff --git a/rendered/manifests/tests_metallb_false/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml b/rendered/manifests/tests_metallb_false/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml
@@ -21,13 +21,33 @@ spec:
         app: release-name-mongodb
         mode: standalone
     spec:
+      securityContext:
+        enabled: true
+        fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
 
       initContainers:
 
       containers:
       - name: mongodb
-        image: "mongo:7.0"
+        image: "mongo:8.2.2"
         imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          enabled: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
 
         ports:
         - containerPort: 27017
diff --git a/rendered/manifests/tests_mongodb_custom_image/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml b/rendered/manifests/tests_mongodb_custom_image/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml
@@ -21,13 +21,33 @@ spec:
         app: release-name-mongodb
         mode: standalone
     spec:
+      securityContext:
+        enabled: true
+        fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
 
       initContainers:
 
       containers:
       - name: mongodb
         image: "bitnamilegacy/mongodb:8.0.13-debian-10-r0"
         imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          enabled: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
 
         ports:
         - containerPort: 27017
diff --git a/rendered/manifests/tests_only_polling/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml b/rendered/manifests/tests_only_polling/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml
@@ -21,13 +21,33 @@ spec:
         app: release-name-mongodb
         mode: standalone
     spec:
+      securityContext:
+        enabled: true
+        fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
 
       initContainers:
 
       containers:
       - name: mongodb
-        image: "mongo:7.0"
+        image: "mongo:8.2.2"
         imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          enabled: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
 
         ports:
         - containerPort: 27017
diff --git a/rendered/manifests/tests_only_traps/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml b/rendered/manifests/tests_only_traps/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml
@@ -21,13 +21,33 @@ spec:
         app: release-name-mongodb
         mode: standalone
     spec:
+      securityContext:
+        enabled: true
+        fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
 
       initContainers:
 
       containers:
       - name: mongodb
-        image: "mongo:7.0"
+        image: "mongo:8.2.2"
         imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          enabled: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
 
         ports:
         - containerPort: 27017
diff --git a/rendered/manifests/tests_probes_enabled/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml b/rendered/manifests/tests_probes_enabled/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml
@@ -21,13 +21,33 @@ spec:
         app: release-name-mongodb
         mode: standalone
     spec:
+      securityContext:
+        enabled: true
+        fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
 
       initContainers:
 
       containers:
       - name: mongodb
-        image: "mongo:7.0"
+        image: "mongo:8.2.2"
         imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          enabled: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
 
         ports:
         - containerPort: 27017
diff --git a/rendered/manifests/tests_redis_ha/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml b/rendered/manifests/tests_redis_ha/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml
@@ -21,13 +21,33 @@ spec:
         app: release-name-mongodb
         mode: standalone
     spec:
+      securityContext:
+        enabled: true
+        fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
 
       initContainers:
 
       containers:
       - name: mongodb
-        image: "mongo:7.0"
+        image: "mongo:8.2.2"
         imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          enabled: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
 
         ports:
         - containerPort: 27017
diff --git a/rendered/manifests/tests_traps_nodeport/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml b/rendered/manifests/tests_traps_nodeport/splunk-connect-for-snmp/templates/mongodb/mongodb-standalone-statefulset.yaml
@@ -21,13 +21,33 @@ spec:
         app: release-name-mongodb
         mode: standalone
     spec:
+      securityContext:
+        enabled: true
+        fsGroup: 1001
+        fsGroupChangePolicy: Always
+        supplementalGroups: []
+        sysctls: []
 
       initContainers:
 
       containers:
       - name: mongodb
-        image: "mongo:7.0"
+        image: "mongo:8.2.2"
         imagePullPolicy: IfNotPresent
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          enabled: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          runAsGroup: 1001
+          runAsNonRoot: true
+          runAsUser: 1001
+          seLinuxOptions: {}
+          seccompProfile:
+            type: RuntimeDefault
 
         ports:
         - containerPort: 27017
