[stable/docker-registry] Add securitycontext to satisfy podsecuritypolicy (#7645)

* Add securitycontext to satisfy podsecuritypolicy

Signed-off-by: Bart Verwilst <bart@verwilst.be>

* Fix whitespace

Signed-off-by: Bart Verwilst <bart@verwilst.be>

stable/docker-registry/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 description: A Helm chart for Docker Registry
 name: docker-registry
-version: 1.5.2
+version: 1.5.3
 appVersion: 2.6.2
 home: https://hub.docker.com/_/registry/
 icon: https://hub.docker.com/public/images/logos/mini-logo.svg

stable/docker-registry/templates/NOTES.txt

@@ -1,7 +1,7 @@
 1. Get the application URL by running these commands:
 {{- if .Values.ingress.enabled }}
 {{- range .Values.ingress.hosts }}
-  http://{{ . }}
+  http{{ if $.Values.ingress.tls }}s{{ end }}://{{ . }}{{ $.Values.ingress.path }}
 {{- end }}
 {{- else if contains "NodePort" .Values.service.type }}
   export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ template "docker-registry.fullname" . }})

stable/docker-registry/templates/deployment.yaml

@@ -31,6 +31,11 @@ spec:
       {{- end }}
 {{- if .Values.priorityClassName }}
       priorityClassName: "{{ .Values.priorityClassName }}"
+{{- end }}
+{{- if .Values.securityContext.enabled }}
+      securityContext:
+        fsGroup: {{ .Values.securityContext.fsGroup }}
+        runAsUser: {{ .Values.securityContext.runAsUser }}
 {{- end }}
       containers:
         - name: {{ .Chart.Name }}

stable/docker-registry/values.yaml

@@ -103,6 +103,11 @@ configData:
       interval: 10s
       threshold: 3
 
+securityContext:
+  enabled: true
+  runAsUser: 1000
+  fsGroup: 1000
+
 priorityClassName: ""
 
 nodeSelector: {}