change(template): Set security context by default to restrictive values

2026-10-17 16:46:51 +02:00 · 2024-02-04 22:19:26 +01:00
parent 0b48a5a0ab
commit 2bc1d19ee1
2 changed files with 10 additions and 6 deletions
@@ -39,7 +39,13 @@ podSecurityContext: {}
  # fsGroup: 2000

 # Configure security context of the application container
-securityContext: {}
+securityContext:
+  seccompProfile:
+    type: RuntimeDefault
+  capabilities:
+    drop: ['ALL']
+  allowPrivilegeEscalation: false
+  readOnlyRootFilesystem: true
 #   capabilities:
 #     drop:
 #     - ALL