[deepnemesis]

Description of the change

Add seccompProfile.type: RuntimeDefault to the default pod security contexts
of both CloudNativePG chart workloads:

• CloudNativePG operator
• Barman Cloud plugin

The chart version is bumped to 1.0.14, and the README and changelog are
updated accordingly.

Benefits

• Adds pod-level seccomp protection.
• Improves alignment with Kubernetes Pod Security Standards.
• Provides defense in depth alongside the existing container-level seccomp
  configuration.
• Aligns the chart with other hardened Bitnami database charts.

Possible drawbacks

Clusters that do not support the RuntimeDefault seccomp profile may need to
override or disable the pod security context. Supported Kubernetes versions
normally provide this profile.

Applicable issues

• fixes [bitnami/cloudnative-pg] Add seccompProfile to podSecurityContext #36632

Additional information

The existing operator and Barman plugin Deployment templates already render
the complete podSecurityContext through
common.compatibility.renderSecurityContext; therefore, no template changes
are necessary.

Checklist

• Chart version bumped in Chart.yaml according to semver.
• Variables documented in values.yaml and added to README.md.
• Pull request title follows the Bitnami chart convention.
• All commits signed off and compliant with the DCO.

[github-actions]

This Pull Request has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thank you for your contribution.

[github-actions]

Due to the lack of activity in the last 5 days since it was marked as "stale", we proceed to close this Pull Request. Do not hesitate to reopen it later if necessary.