add security context runAsNonRoot option (#163)

Signed-off-by: Vivian Noronha <[email protected]>

charts/jenkins/CHANGELOG.md

@@ -12,6 +12,10 @@ Use the following links to reference issues, PRs, and commits prior to v2.6.0.
 The change log until v1.5.7 was auto-generated based on git commits.
 Those entries include a reference to the git commit to be able to get more details.
 
+## 3.0.1
+
+* added 'runAsNonroot' to security context
+
 ## 3.0.0
 
 * Chart uses StatefulSet instead of Deployment

charts/jenkins/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 name: jenkins
 home: https://jenkins.io/
-version: 3.0.0
+version: 3.0.1
 appVersion: 2.249.3
 description: Jenkins - Build great things at any scale! The leading open source automation server, Jenkins provides hundreds of plugins to support building, deploying and automating any project.
 sources:

charts/jenkins/templates/jenkins-controller-statefulset.yaml

@@ -72,6 +72,7 @@ spec:
   {{- if and (.Values.controller.runAsUser) (.Values.controller.fsGroup) }}
     {{- if not (eq (int .Values.controller.runAsUser) 0) }}
         fsGroup: {{ .Values.controller.fsGroup }}
+        runAsNonRoot: true
     {{- end }}
     {{- if .Values.controller.securityContextCapabilities }}
         capabilities:

charts/jenkins/tests/jenkins-controller-statefulset-test.yaml

@@ -175,6 +175,7 @@ tests:
                 securityContext:
                   fsGroup: 1000
                   runAsUser: 1000
+                  runAsNonRoot: true
                 serviceAccountName: my-release-jenkins
                 volumes:
                 - emptyDir: {}
@@ -271,6 +272,7 @@ tests:
         value:
           runAsUser: 2000
           fsGroup: 4000
+          runAsNonRoot: true
           capabilities:
             drop:
               - NET_RAW