Add securityContext to helm and manifest

wacken89 · Sep 27, 2024 · f874627 · f874627
1 parent 474b8c5
commit f874627
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 7 deletions.
diff --git a/deploy/helm-chart/values.yaml b/deploy/helm-chart/values.yaml
@@ -54,13 +54,15 @@ env:
 podSecurityContext: {}
   # fsGroup: 2000
 
-securityContext: {}
-  # capabilities:
-  #   drop:
-  #   - ALL
-  # readOnlyRootFilesystem: true
-  # runAsNonRoot: true
-  # runAsUser: 1000
+securityContext: 
+  capabilities:
+    drop:
+    - ALL
+  readOnlyRootFilesystem: true
+  runAsNonRoot: true
+  runAsUser: 11001
+  seccompProfile:
+    type: RuntimeDefault
 
 service:
   type: ClusterIP

diff --git a/deploy/kubernetes-manifest/kubernetes.yaml b/deploy/kubernetes-manifest/kubernetes.yaml
@@ -46,5 +46,14 @@ spec:
           limits:
             memory: "128Mi"
             cpu: "250m"
+        securityContext:
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 11001
+          seccompProfile:
+            type: RuntimeDefault
         ports:
         - containerPort: 8000