security context - drop all capabilities (kiali#160)

* security context - drop all capabilities part of kiali/kiali#5399 * add seccompProfile
giffgaff · Nov 11, 2022 · b085744 · b085744
1 parent 2cc24e3
commit b085744
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/kiali-operator/templates/deployment.yaml b/kiali-operator/templates/deployment.yaml
@@ -48,6 +48,11 @@ spec:
           allowPrivilegeEscalation: false
           privileged: false
           runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
+          capabilities:
+            drop:
+            - ALL
         volumeMounts:
         - mountPath: /tmp/ansible-operator/runner
           name: runner

diff --git a/kiali-server/templates/deployment.yaml b/kiali-server/templates/deployment.yaml
@@ -65,6 +65,11 @@ spec:
           privileged: false
           readOnlyRootFilesystem: true
           runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
+          capabilities:
+            drop:
+            - ALL
         ports:
         - name: api-port
           containerPort: {{ .Values.server.port | default 20001 }}