change: Set security context by default to restrictive values

2026-10-17 16:46:51 +02:00 · 2024-02-04 22:26:43 +01:00
parent 2bc1d19ee1
commit d94fa69459
15 changed files with 69 additions and 39 deletions
@@ -33,7 +33,13 @@ podSecurityContext: {}
 # fsGroup: 2000

 # Configure security context of the application container
-securityContext: {}
+securityContext:
+  seccompProfile:
+    type: RuntimeDefault
+  capabilities:
+    drop: ['ALL']
+  allowPrivilegeEscalation: false
+  readOnlyRootFilesystem: true
 #   capabilities:
 #     drop:
 #     - ALL