change: Set security context by default to restrictive values for argo deployments

This commit is contained in:
2024-02-04 22:29:59 +01:00
parent d94fa69459
commit 1cf2c14ee7
15 changed files with 57 additions and 27 deletions
+3 -3
View File
@@ -1,6 +1,6 @@
dependencies:
- name: template
repository: https://repo.2martens.de/charts
version: 0.3.3
digest: sha256:d618a82a3ea62186be46e0c52aa3778782feee4ba5ca8c0211c9036aaa3f9581
generated: "2024-01-09T22:25:43.437286+01:00"
version: 0.4.0
digest: sha256:7a97df7cd21a976a9092fa2c1dc7bd4e2b6eeabfd7c0cfe099545afdf6fe60da
generated: "2024-02-04T22:28:25.9401+01:00"
+1 -1
View File
@@ -4,5 +4,5 @@ version: 0.1.0
type: application
dependencies:
- name: template
version: 0.3.3
version: 0.4.0
repository: https://repo.2martens.de/charts
+7 -1
View File
@@ -33,7 +33,13 @@ podSecurityContext: {}
# fsGroup: 2000
# Configure security context of the application container
securityContext: {}
securityContext:
seccompProfile:
type: RuntimeDefault
capabilities:
drop: ['ALL']
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
# capabilities:
# drop:
# - ALL