fix: refactor securityContext

src/helm/env.d/dev-dinum/values.meet.yaml.gotmpl

@@ -118,17 +118,14 @@ backend:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
 frontend:
 
@@ -145,17 +142,14 @@ frontend:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
 ingress:
   enabled: true
@@ -203,17 +197,14 @@ summary:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   image:
     repository: localhost:5001/meet-summary
@@ -257,17 +248,14 @@ celeryTranscribe:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   image:
     repository: localhost:5001/meet-summary
@@ -311,17 +299,14 @@ celerySummarize:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   image:
     repository: localhost:5001/meet-summary

src/helm/env.d/dev-keycloak/values.meet.yaml.gotmpl

@@ -92,17 +92,14 @@ backend:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   migrate:
     command:
@@ -157,17 +154,14 @@ frontend:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   image:
     repository: localhost:5001/meet-frontend-generic
@@ -222,17 +216,14 @@ summary:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   image:
     repository: localhost:5001/meet-summary
@@ -277,17 +268,14 @@ celeryTranscribe:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   image:
     repository: localhost:5001/meet-summary
@@ -333,17 +321,14 @@ celerySummarize:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   image:
     repository: localhost:5001/meet-summary
@@ -378,17 +363,14 @@ agents:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   image:
     repository: localhost:5001/meet-agents

src/helm/env.d/dev/values.meet.yaml.gotmpl

@@ -102,17 +102,14 @@ backend:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   migrate:
     command:
@@ -167,17 +164,14 @@ frontend:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   image:
     repository: localhost:5001/meet-frontend
@@ -230,17 +224,14 @@ summary:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   image:
     repository: localhost:5001/meet-summary
@@ -284,17 +275,14 @@ celeryTranscribe:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   image:
     repository: localhost:5001/meet-summary
@@ -338,17 +326,14 @@ celerySummarize:
     fsGroup: 1000
     fsGroupChangePolicy: "OnRootMismatch"
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   securityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    runAsNonRoot: true
     allowPrivilegeEscalation: false
     capabilities:
       drop:
         - ALL
-    seccompProfile:
-      type: RuntimeDefault
 
   image:
     repository: localhost:5001/meet-summary