Sten 69848e42f0 fix(infra): pin minio/mc tags + add postgres securityContext + harden bootstrap script ...

Address ai-review feedback on PR #17:
- Pin quay.io/minio/minio and mc to specific RELEASE tags (Renovate
  will bump). 'latest' is unpredictable in GitOps.
- Bootstrap script: set -e -> set -euo pipefail.
- Postgres container: runAsNonRoot, uid/gid 999, drop ALL caps,
  no privilege escalation. Matches PSS restricted profile.

2026-05-28 16:05:48 +02:00

..

base

diffs

2026-05-16 22:05:02 +02:00

dashboards

remove trivy

2026-04-24 15:24:58 +02:00

overlays

fix(infra): pin minio/mc tags + add postgres securityContext + harden bootstrap script

2026-05-28 16:05:48 +02:00

values

onlySSO

2026-05-16 23:04:11 +02:00