nameOverride: controller
image:
  registry: docker.io
  repository: bitnami/sealed-secrets-controller
  tag: 0.28.0
podSecurityContext:
  enabled: true
  fsGroup: 65534
containerSecurityContext:
  enabled: true
  readOnlyRootFilesystem: true
  runAsNonRoot: true
  runAsUser: 1001
  capabilities:
    drop:
      - ALL