OZG-3363 add helm securityContext

xta-adapter/src/main/helm/templates/xta_adapter_cronjob.yaml

@@ -94,6 +94,11 @@ spec:
                   mountPath: "/workspace/keystore/xta-keystore.p12"
                   subPath: file
                   readOnly: true
+              securityContext:
+                allowPrivilegeEscalation: false
+                privileged: false
+                readOnlyRootFilesystem: false
+                runAsNonRoot: false
           volumes:
             - name: bindings
               configMap:

xta-adapter/src/test/helm/xta_adapter_cronjob_basic_test.yaml

@@ -84,3 +84,19 @@ tests:
     - equal:
         path: spec.jobTemplate.spec.template.spec.containers[0].image
         value: "docker.ozg-sh.de/xta-adapter:9.9.99"
+
+  - it: check securityContext
+    template: xta_adapter_cronjob.yaml
+    asserts:
+    - equal:
+        path: spec.jobTemplate.spec.template.spec.containers[0].securityContext.allowPrivilegeEscalation
+        value: false
+    - equal:
+        path: spec.jobTemplate.spec.template.spec.containers[0].securityContext.privileged
+        value: false
+    - equal:
+        path: spec.jobTemplate.spec.template.spec.containers[0].securityContext.readOnlyRootFilesystem
+        value: false
+    - equal:
+        path: spec.jobTemplate.spec.template.spec.containers[0].securityContext.runAsNonRoot
+        value: false
\ No newline at end of file