mirror of
https://github.com/2martens/cloud-configuration.git
synced 2026-10-17 16:46:51 +02:00
change: Set security context by default to restrictive values for argo deployments
This commit is contained in:
@@ -1,9 +1,9 @@
|
||||
dependencies:
|
||||
- name: template
|
||||
repository: https://repo.2martens.de/charts
|
||||
version: 0.3.3
|
||||
version: 0.4.0
|
||||
- name: prometheus-kafka-exporter
|
||||
repository: https://prometheus-community.github.io/helm-charts
|
||||
version: 2.7.0
|
||||
digest: sha256:7767fee0e666af815c013da4ed1e14692ce54936f3ebd495af5cdfbdccc60b60
|
||||
generated: "2024-01-10T10:56:41.312194+01:00"
|
||||
version: 2.8.0
|
||||
digest: sha256:38c3e56ef9785061cd6aacb74a180e503bb2356fe0ac93ce17521cdc9208ec7b
|
||||
generated: "2024-02-04T22:29:03.374801+01:00"
|
||||
|
||||
@@ -4,8 +4,8 @@ version: 0.1.0
|
||||
type: application
|
||||
dependencies:
|
||||
- name: template
|
||||
version: 0.3.3
|
||||
version: 0.4.0
|
||||
repository: https://repo.2martens.de/charts
|
||||
- name: prometheus-kafka-exporter
|
||||
version: 2.7.0
|
||||
version: 2.8.0
|
||||
repository: https://prometheus-community.github.io/helm-charts
|
||||
@@ -33,7 +33,13 @@ podSecurityContext: {}
|
||||
# fsGroup: 2000
|
||||
|
||||
# Configure security context of the application container
|
||||
securityContext: {}
|
||||
securityContext:
|
||||
seccompProfile:
|
||||
type: RuntimeDefault
|
||||
capabilities:
|
||||
drop: ['ALL']
|
||||
allowPrivilegeEscalation: false
|
||||
readOnlyRootFilesystem: true
|
||||
# capabilities:
|
||||
# drop:
|
||||
# - ALL
|
||||
|
||||
Reference in New Issue
Block a user