feat(mastodon): Try to move Mastodon to PSS restricted compliance

charts/mastodon/values.yaml

@@ -163,7 +163,7 @@ mastodon:
     # -- Pod Security Context for Streaming Pods, overwrites .Values.podSecurityContext
     podSecurityContext: {}
     # -- (Streaming Container) Security Context for Streaming Pods, overwrites .Values.securityContext
-    securityContext: {}
+    securityContext:
     # -- (Streaming Container) Resources for Streaming Pods, overwrites .Values.resources
     resources: {}
     # limits:
@@ -381,9 +381,13 @@ externalAuth:
 # if you manually change the UID/GID environment variables, ensure these values
 # match:
 podSecurityContext:
+  allowPrivilegeEscalation: false
+  runAsNonRoot: true
   runAsUser: 991
   runAsGroup: 991
   fsGroup: 991
+  seccompProfile:
+    type: "RuntimeDefault"
 
 # @ignored
 securityContext: {}