updated ingress

2026-07-30 12:14:31 +02:00
parent 2ac5d6579d
commit 7e9a697bb2
1 changed files with 10 additions and 0 deletions
@@ -16,9 +16,19 @@ spec:
      labels:
        app: {{ .Values.app }}
    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 65534
+        seccompProfile:
+          type: RuntimeDefault
      containers:
        - name: {{ .Values.app }}
          image: {{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag }}
          ports:
            - containerPort: {{ .Values.ports.containerPort }}
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL