More sec stuff

2022-11-15 10:33:14 +01:00 · 2022-11-15 10:33:14 +01:00 · 2f4eacb9ed
commit 2f4eacb9ed
parent 07c7253447
1 changed files with 6 additions and 0 deletions
--- a/apps/templates/traefik.yaml
+++ b/apps/templates/traefik.yaml
@ -34,7 +34,13 @@ spec:
            hasDns: "true"

          securityContext:
+            capabilities:
+              drop: [ALL]
+              add: [NET_BIND_SERVICE]
+            readOnlyRootFilesystem: true
+            runAsGroup: 0
            runAsNonRoot: false
+            runAsUser: 0

          affinity:
            podAntiAffinity: