From 7e9a697bb25b95aed33a46cb62185e7cec60ec61 Mon Sep 17 00:00:00 2001
From: dutchie031 <timrorije@gmail.com>
Date: Thu, 30 Jul 2026 12:14:31 +0200
Subject: [PATCH] updated ingress

---
 .helm/templates/deployment.yaml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.helm/templates/deployment.yaml b/.helm/templates/deployment.yaml
index fe0592d..84a770d 100644
--- a/.helm/templates/deployment.yaml
+++ b/.helm/templates/deployment.yaml
@@ -16,9 +16,19 @@ spec:
       labels:
         app: {{ .Values.app }}
     spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 65534
+        seccompProfile:
+          type: RuntimeDefault
       containers:
         - name: {{ .Values.app }}
           image: {{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}
           ports:
             - containerPort: {{ .Values.ports.containerPort }}
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
           
\ No newline at end of file