Use seccompProfile RuntimeDefault (#346)

Signed-off-by: Tamal Saha <tamal@appscode.com>

charts/stash-community/ci/ci-values.yaml

@@ -1,20 +1,2 @@
 # https://github.com/helm/charts/blob/master/test/README.md#providing-custom-test-values
 license: ""
-operator:
-  securityContext:
-    seccompProfile:
-      type: RuntimeDefault
-crdInstaller:
-  registry: appscodeci
-  tag: latest
-  securityContext:
-    seccompProfile:
-      type: RuntimeDefault
-pushgateway:
-  securityContext:
-    seccompProfile:
-      type: RuntimeDefault
-cleaner:
-  securityContext:
-    seccompProfile:
-      type: RuntimeDefault

charts/stash-community/values.yaml

@@ -43,8 +43,8 @@ operator:
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 65534
-    # seccompProfile:
-    #   type: RuntimeDefault
+    seccompProfile:
+      type: RuntimeDefault
 
 crdInstaller:
   # Docker registry of the CRD installer image. By default, it will use the same registry as the operator.
@@ -63,8 +63,8 @@ crdInstaller:
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 65534
-    # seccompProfile:
-    #   type: RuntimeDefault
+    seccompProfile:
+      type: RuntimeDefault
   # Node labels for pod assignment
   nodeSelector: # +doc-gen:break
     kubernetes.io/os: linux
@@ -90,8 +90,8 @@ pushgateway:
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 65534
-    # seccompProfile:
-    #   type: RuntimeDefault
+    seccompProfile:
+      type: RuntimeDefault
   # If you want to use a custom Pushgatway, specify its URL.
   # Stash will not inject pushgatway sidecar if you set this field.
   customURL: ""
@@ -113,8 +113,8 @@ cleaner:
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 65534
-    # seccompProfile:
-    #   type: RuntimeDefault
+    seccompProfile:
+      type: RuntimeDefault
   # Node labels for pod assignment
   nodeSelector: # +doc-gen:break
     kubernetes.io/os: linux

charts/stash-enterprise/ci/ci-values.yaml

@@ -1,20 +1,2 @@
 # https://github.com/helm/charts/blob/master/test/README.md#providing-custom-test-values
 license: ""
-operator:
-  securityContext:
-    seccompProfile:
-      type: RuntimeDefault
-crdInstaller:
-  registry: appscodeci
-  tag: latest
-  securityContext:
-    seccompProfile:
-      type: RuntimeDefault
-pushgateway:
-  securityContext:
-    seccompProfile:
-      type: RuntimeDefault
-cleaner:
-  securityContext:
-    seccompProfile:
-      type: RuntimeDefault

charts/stash-enterprise/values.yaml

@@ -43,8 +43,8 @@ operator:
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 65534
-    # seccompProfile:
-    #   type: RuntimeDefault
+    seccompProfile:
+      type: RuntimeDefault
 crdInstaller:
   # Docker registry of the CRD installer image. By default, it will use the same registry as the operator.
   registry: ""
@@ -62,8 +62,8 @@ crdInstaller:
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 65534
-    # seccompProfile:
-    #   type: RuntimeDefault
+    seccompProfile:
+      type: RuntimeDefault
   # Node labels for pod assignment
   nodeSelector: # +doc-gen:break
     kubernetes.io/os: linux
@@ -89,8 +89,8 @@ pushgateway:
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 65534
-    # seccompProfile:
-    #   type: RuntimeDefault
+    seccompProfile:
+      type: RuntimeDefault
   # If you want to use a custom Pushgatway, specify its URL.
   # Stash will not inject pushgatway sidecar if you set this field.
   customURL: ""
@@ -111,8 +111,8 @@ cleaner:
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 65534
-    # seccompProfile:
-    #   type: RuntimeDefault
+    seccompProfile:
+      type: RuntimeDefault
   # Node labels for pod assignment
   nodeSelector: # +doc-gen:break
     kubernetes.io/os: linux

charts/stash-ui-server/values.yaml

@@ -28,8 +28,8 @@ image:
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 65534
-    # seccompProfile:
-    #   type: RuntimeDefault
+    seccompProfile:
+      type: RuntimeDefault
 # Specify an array of imagePullSecrets.
 # Secrets must be manually created in the namespace.
 #

charts/stash/ci/ci-values.yaml

@@ -1,41 +1,3 @@
 # https://github.com/helm/charts/blob/master/test/README.md#providing-custom-test-values
 global:
   license: ""
-stash-community:
-  operator:
-    securityContext:
-      seccompProfile:
-        type: RuntimeDefault
-  crdInstaller:
-    registry: appscodeci
-    tag: latest
-    securityContext:
-      seccompProfile:
-        type: RuntimeDefault
-  pushgateway:
-    securityContext:
-      seccompProfile:
-        type: RuntimeDefault
-  cleaner:
-    securityContext:
-      seccompProfile:
-        type: RuntimeDefault
-stash-enterprise:
-  operator:
-    securityContext:
-      seccompProfile:
-        type: RuntimeDefault
-  crdInstaller:
-    registry: appscodeci
-    tag: latest
-    securityContext:
-      seccompProfile:
-        type: RuntimeDefault
-  pushgateway:
-    securityContext:
-      seccompProfile:
-        type: RuntimeDefault
-  cleaner:
-    securityContext:
-      seccompProfile:
-        type: RuntimeDefault