Improve deployment security

2024-01-14 19:37:57 +01:00 · 2024-01-14 19:37:57 +01:00 · 0eaaf6d577
commit 0eaaf6d577
parent a02f8e4dea
1 changed files with 2 additions and 0 deletions
--- a/yaml/deployment.yaml
+++ b/yaml/deployment.yaml
@ -65,6 +65,8 @@ spec:
              cpu: "0.01"
          securityContext:
            allowPrivilegeEscalation: false
+            runAsNonRoot: true
+            readOnlyRootFilesystem: true
            capabilities:
              drop:
              - ALL