Improve container security

- Add security context capabilities with drop all in `charts/mailpit/values.yaml` - Add seccompProfile to container security context in `charts/mailpit/values.yaml`
jouve · Apr 25, 2024 · 24a82c0 · 24a82c0
1 parent a2ef882
commit 24a82c0
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/charts/mailpit/values.yaml b/charts/mailpit/values.yaml
@@ -84,10 +84,15 @@ podSecurityContext:
 ##
 containerSecurityContext:
   allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+      - ALL
   runAsUser: 1001
   runAsGroup: 1001
   runAsNonRoot: true
   readOnlyRootFilesystem: true
+  seccompProfile:
+    type: RuntimeDefault
 
 ## @param replicaCount Number of replicas to deploy
 ##