Add security context

stakater · Nov 4, 2020 · 07d8445 · 07d8445
1 parent 9edec1b
commit 07d8445
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/deployments/kubernetes/templates/chart/values.yaml.tmpl b/deployments/kubernetes/templates/chart/values.yaml.tmpl
@@ -33,6 +33,12 @@ gitWebhookProxy:
         port: 80
         protocol: TCP
         targetPort: 8080
+  securityContext:
+    readOnlyRootFilesystem: true
+    allowPrivilegeEscalation: false
+  podSecurityContext:
+    runAsUser: 1001
+    runAsNonRoot: true
   ingress:
     enabled: false
     annotations: