change: Set security context by default to restrictive values for argo deployments

2026-10-17 16:46:51 +02:00 · 2024-02-04 22:29:59 +01:00
parent d94fa69459
commit 1cf2c14ee7
15 changed files with 57 additions and 27 deletions
@@ -33,7 +33,13 @@ podSecurityContext: {}
 # fsGroup: 2000

 # Configure security context of the application container
-securityContext: {}
+securityContext:
+  seccompProfile:
+    type: RuntimeDefault
+  capabilities:
+    drop: ['ALL']
+  allowPrivilegeEscalation: false
+  readOnlyRootFilesystem: true
 #   capabilities:
 #     drop:
 #     - ALL