[🐛] securityContext configuration for Helm chart

[Gianluca755]

• v1.29.0
• EKS

Expected behaviour

The deployment and pod config are compliant with Pod Security Standards (PSS) for Pod Security Admission.

Actual behaviour

This line is blocking the pods, should it be set to true?

kubernetes-monitor/snyk-monitor/templates/deployment.yaml

Line 106 in e5f80f2

runAsNonRoot: false

It would be even better if the securityContext(s) this and this were configurable in values.yaml as this one.

Steps to reproduce

Enforce PSS in namespace, then deploy Snyk with helm chart.

[Gianluca755]

This problem is only the first step, the second is setting the fsGroup in SecurityContext which is what the init container is doing manually in Linux container busybox.