Skip to content

Commit 3d9f24a

Browse files
committed
Make deployment.yaml compliant with security best practices
1 parent 78806bd commit 3d9f24a

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

charts/rancher-backup/templates/deployment.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,11 @@ spec:
3636
- name: {{ .Chart.Name }}
3737
image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
3838
imagePullPolicy: {{ default "Always" .Values.imagePullPolicy }}
39+
securityContext:
40+
allowPrivilegeEscalation: false
41+
readOnlyRootFilesystem: true
42+
runAsNonRoot: true
43+
runAsUser: 1000
3944
ports:
4045
- containerPort: 8080
4146
args:

0 commit comments

Comments
 (0)