cleanup tests

Azure · Nov 8, 2024 · 570b328 · 570b328
1 parent bf7e42c
commit 570b328
Show file tree

Hide file tree

Showing 7 changed files with 24 additions and 13 deletions.
diff --git a/pkg/fixtures/deployments/helm/charts/values.yaml b/pkg/fixtures/deployments/helm/charts/values.yaml
@@ -78,7 +78,27 @@ affinity:
           matchLabels:
             app.kubernetes.io/name: testapp
 
-securityContext: {}
+securityContext:
+  seccompProfile:
+    type: RuntimeDefault
+  capabilities:
+    drop:
+      - ALL
+    add:
+      - SETPCAP
+      - MKNOD
+      - AUDIT_WRITE
+      - CHOWN
+      - DAC_OVERRIDE
+      - FOWNER
+      - FSETID
+      - KILL
+      - SETGID
+      - SETUID
+      - NET_BIND_SERVICE
+      - SYS_CHROOT
+      - SETFCAP
+      - SYS_PTRACE
 
 envVars:
 

diff --git a/template/deployments/helm/charts/templates/configmap.yaml b/template/deployments/helm/charts/templates/configmap.yaml
@@ -10,6 +10,6 @@ metadata:
 data:
 {{- `
 {{- range $key, $value := .Values.envVars }}
-  "{{ $key }}": "{{ $value }}"
+  {{ $key }}: {{ $value }}
 {{- end }}
 ` -}}
diff --git a/template/deployments/helm/charts/values.yaml b/template/deployments/helm/charts/values.yaml
@@ -79,9 +79,6 @@ affinity:
             app.kubernetes.io/name: {{ .Config.GetVariableValue "APPNAME" }}
 
 securityContext:
-  runAsNonRoot: true
-  runAsUser: 1000
-  runAsGroup: 3000
   seccompProfile:
     type: RuntimeDefault
   capabilities:

diff --git a/template/deployments/kustomize/base/configmap.yaml b/template/deployments/kustomize/base/configmap.yaml
@@ -8,5 +8,5 @@ metadata:
     kubernetes.azure.com/generator: {{ .Config.GetVariableValue "GENERATORLABEL" }}
 data:
 {{- range $key, $value := .Config.GetVariableValue "ENVVARS" }}
-  "{{ $key }}": "{{ $value }}"
+  {{ $key }}: {{ $value }}
 {{- end }}
diff --git a/template/deployments/kustomize/base/deployment.yaml b/template/deployments/kustomize/base/deployment.yaml
@@ -44,9 +44,6 @@ spec:
             successThreshold: {{ .Config.GetVariableValue "READINESSSUCCESSTHRESHOLD" }}
             initialDelaySeconds: {{ .Config.GetVariableValue "READINESSINITIALDELAY" }}
           securityContext:
-            runAsNonRoot: true
-            runAsUser: 1000
-            runAsGroup: 3000
             seccompProfile:
               type: RuntimeDefault
             capabilities:

diff --git a/template/deployments/manifests/manifests/configmap.yaml b/template/deployments/manifests/manifests/configmap.yaml
@@ -8,5 +8,5 @@ metadata:
     kubernetes.azure.com/generator: {{ .Config.GetVariableValue "GENERATORLABEL" }}
 data:
 {{- range $key, $value := .Config.GetVariableValue "ENVVARS" }}
-  "{{ $key }}": "{{ $value }}"
+  {{ $key }}: {{ $value }}
 {{- end }}
diff --git a/template/deployments/manifests/manifests/deployment.yaml b/template/deployments/manifests/manifests/deployment.yaml
@@ -44,9 +44,6 @@ spec:
             successThreshold: {{ .Config.GetVariableValue "READINESSSUCCESSTHRESHOLD" }}
             initialDelaySeconds: {{ .Config.GetVariableValue "READINESSINITIALDELAY" }}
           securityContext:
-            runAsNonRoot: true
-            runAsUser: 1000
-            runAsGroup: 3000
             seccompProfile:
               type: RuntimeDefault
             capabilities: