feat: add podLabels and securitycontext by default (#26)

Author: daniel-maganto

charts/komoplane/templates/deployment.yaml

@@ -20,6 +20,9 @@ spec:
       {{- end }}
       labels:
         {{- include "app.selectorLabels" . | nindent 8 }}
+      {{- with .Values.podLabels }}
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
     spec:
       {{- with .Values.imagePullSecrets }}
       imagePullSecrets:

charts/komoplane/values.yaml

@@ -45,11 +45,19 @@ updateStrategy:
   type: RollingUpdate
 
 
+podLabels: {}
 podAnnotations: {}
 
-podSecurityContext: {}
+podSecurityContext: 
+  fsGroup: 2000
 
-securityContext: {}
+securityContext:
+  readOnlyRootFilesystem: true
+  runAsNonRoot: true
+  runAsUser: 1000
+  capabilities:
+    drop:
+    - ALL  
 
 service:
   type: ClusterIP