From a4d9c41966ef40bc0c6b512c52929e09c1f9cd1a Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Wed, 26 Feb 2025 15:36:02 +0100
Subject: [PATCH] Make root

---
 apps/templates/mbgwp-helm.yaml | 18 ++++++++++++------
 1 file changed, 12 insertions(+), 6 deletions(-)

diff --git a/apps/templates/mbgwp-helm.yaml b/apps/templates/mbgwp-helm.yaml
index 5ac4f2e..9dcfd6c 100644
--- a/apps/templates/mbgwp-helm.yaml
+++ b/apps/templates/mbgwp-helm.yaml
@@ -72,13 +72,19 @@ spec:
           ##
           annotations: {}
         allowEmptyPassword: true
-        podSecurityContext:
+        containerSecurityContext:
           enabled: true
-          fsGroupChangePolicy: Always
-          sysctls: []
-          supplementalGroups:
-          - 6
-          fsGroup: 1001
+          seLinuxOptions: {}
+          runAsUser: 0
+          runAsGroup: 0
+          runAsNonRoot: false
+          privileged: false
+          readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop: ["ALL"]
+          seccompProfile:
+            type: "RuntimeDefault
 
   syncPolicy:
     syncOptions: