{{/* SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS" SPDX-License-Identifier: Apache-2.0 */}} --- global: domain: {{ .Values.global.domain | quote }} hosts: {{ .Values.global.hosts | toYaml | nindent 4 }} imagePullSecrets: {{ .Values.global.imagePullSecrets | toYaml | nindent 4 }} cleanup: deletePodsOnSuccess: {{ .Values.cleanup.deletePodsOnSuccess }} keepPVCOnDelete: {{ .Values.cleanup.keepPVCOnDelete }} config: openproject: fileshareName: "Nextcloud at {{ .Values.global.domain }}" admin: username: {{ .Values.secrets.openproject.apiAdminUsername | quote }} password: {{ .Values.secrets.openproject.apiAdminPassword | quote }} nextcloud: admin: username: "nextcloud" password: {{ .Values.secrets.nextcloud.adminPassword | quote }} containerSecurityContext: allowPrivilegeEscalation: false capabilities: drop: - "ALL" enabled: true privileged: false runAsUser: 1000 runAsGroup: 1000 seccompProfile: type: "RuntimeDefault" readOnlyRootFilesystem: true runAsNonRoot: true seLinuxOptions: {{ .Values.seLinuxOptions.openprojectBootstrap }} image: registry: {{ .Values.global.imageRegistry | default .Values.images.openprojectBootstrap.registry | quote }} repository: {{ .Values.images.openprojectBootstrap.repository | quote }} tag: {{ .Values.images.openprojectBootstrap.tag | quote }} imagePullPolicy: {{ .Values.global.imagePullPolicy |quote }} job: enabled: true podSecurityContext: enabled: true fsGroup: 1000 fsGroupChangePolicy: "OnRootMismatch" ...