more codegen

Author: ppapapetrou76

manifests/ha/base/redis-ha/chart/upstream.yaml

@@ -1099,8 +1099,14 @@ spec:
         - sh
         args:
         - /readonly/haproxy_init.sh
-        securityContext: 
-          null
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
         volumeMounts:
         - name: config-volume
           mountPath: /readonly
@@ -1111,8 +1117,14 @@ spec:
       - name: haproxy
         image: public.ecr.aws/docker/library/haproxy:2.6.17-alpine
         imagePullPolicy: IfNotPresent
-        securityContext: 
-          null
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
         env:
         - name: AUTH
           valueFrom:
@@ -1215,8 +1227,15 @@ spec:
         - sh
         args:
         - /readonly-config/init.sh
-        securityContext: 
-          null        
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          runAsNonRoot: true
+          runAsUser: 1000
+          seccompProfile:
+            type: RuntimeDefault
         env:
         - name: SENTINEL_ID_0
           value: 3c0d9c0320bb34888c2df5757c718ce6ca992ce6
@@ -1245,8 +1264,14 @@ spec:
           - redis-server
         args:
           - /data/conf/redis.conf
-        securityContext: 
-          null
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
+          runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
         env:
         - name: AUTH
           valueFrom:
@@ -1301,8 +1326,14 @@ spec:
           - redis-sentinel
         args:
           - /data/conf/sentinel.conf
-        securityContext: 
-          null
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
+          runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
         env:
         - name: AUTH
           valueFrom:
@@ -1356,8 +1387,14 @@ spec:
           - sh
         args:
           - /readonly-config/fix-split-brain.sh
-        securityContext: 
-          null        
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
+          runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
         env:
         - name: SENTINEL_ID_0
           value: 3c0d9c0320bb34888c2df5757c718ce6ca992ce6