diff --git a/chart/values.yaml b/chart/values.yaml index f5187bdbcf9dad63c860b7597988f9922da6f410..3787db464c297b2efb3aa868643a61194ebcda19 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -32,10 +32,12 @@ serviceAccount: podAnnotations: {} -podSecurityContext: {} +podSecurityContext: + {} # fsGroup: 2000 -securityContext: {} +securityContext: + {} # capabilities: # drop: # - ALL @@ -54,24 +56,11 @@ ingress: kubernetes.io/tls-acme: "false" nginx.ingress.kubernetes.io/client-body-buffer-size: 30m nginx.ingress.kubernetes.io/configuration-snippet: > - more_set_headers "Content-Security-Policy: default-src 'self'; script-src - 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; - script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; - style-src-elem 'self' 'unsafe-inline'; style-src-attr 'self' - 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src - 'self'; media-src; object-src; prefetch-src; child-src; frame-src 'self'; - worker-src; frame-ancestors 'self' https://scripts.zdv.uni-mainz.de; - form-action 'self' www.paypal.com; base-uri; manifest-src; plugin-types; - report-uri; report-to"; - + more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self'; script-src-elem 'self'; script-src-attr 'self'; style-src 'self'; style-src-elem 'self'; style-src-attr 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-src 'self'; frame-ancestors 'self' https://scripts.zdv.uni-mainz.de; form-action 'self' www.paypal.com"; more_set_headers "X-Frame-Options: sameorigin"; - more_set_headers "X-Content-Type-Options: nosniff"; - more_set_headers "ReferrerPolicy: origin"; - more_set_headers "X-XSS-Protection: 1; mode=block"; - more_set_headers "Permissions-Policy: interest-cohort=()"; if ($arg_out = "results-with-style") { @@ -84,7 +73,8 @@ ingress: # hosts: # - chart-example.local -resources: {} +resources: + {} # We usually recommend not to specify default resources and to leave this as a conscious # choice for the user. This also increases chances charts run on environments with little # resources, such as Minikube. If you do want to specify resources, uncomment the following