Iain Sproat
65a00dca2e
* feat(helm chart): add SecurityContext to pods and containers Speckle pods should run with minimal privileges and capabilities to function. Fix https://github.com/specklesystems/speckle-server/issues/857 * Update securityContext for all pods * frontend runs as nonroot and readonly root filesystem - set fsgroup for all pods with volumes * Frontend requires write directory at /etc/nginx/conf.d * Allow openresty log directory to be writable * feat(helm local test): add test container into the make script Co-authored-by: Gergő Jedlicska <gergo@jedlicska.com>