docs: Fix security context examples (#88)

c-thiel · web-flow · commit e715552560d3 · 2025-07-15T14:57:04.000+02:00
diff --git a/charts/lakekeeper/ci/secure-values.yaml b/charts/lakekeeper/ci/secure-values.yaml
@@ -1,12 +1,13 @@
 helmWait: true
 catalog:
   podSecurityContext:
-    capabilities:
-      drop:
-        - ALL
-    readOnlyRootFilesystem: true
     runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
 
   containerSecurityContext:
-    runAsNonRoot: true
+    allowPrivilegeEscalation: false
     readOnlyRootFilesystem: true
+    capabilities:
+      drop:
+        - all
diff --git a/charts/lakekeeper/values.yaml b/charts/lakekeeper/values.yaml
@@ -71,17 +71,23 @@ catalog:
   podSecurityContext:
     {}
     # # ---- EXAMPLE ----
-    # # securityContext:
-    # capabilities:
-    #   drop:
-    #     - ALL
-    # readOnlyRootFilesystem: true
-    # runAsNonRoot: true
+    # podSecurityContext:
+    #   runAsNonRoot: true
+    #   seccompProfile:
+    #     type: RuntimeDefault
 
   # -- (<html><a href="https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.29/#podsecuritycontext-v1-core">podsecuritycontext-v1-core</a></html>)
   # security context for the catalog container.
   # `runAsUser` is ignored, please set with `catalog.image.uid`, `runAsGroup` is ignored, please set with `catalog.image.gid`
-  containerSecurityContext: {}
+  containerSecurityContext:
+    {}
+    # # ---- EXAMPLE ----
+    # containerSecurityContext
+    #   allowPrivilegeEscalation: false
+    #   readOnlyRootFilesystem: true
+    #   capabilities:
+    #     drop:
+    #       - all
 
   # -- Labels for the catalog Deployment
   labels: {}
