More sec stuff
This commit is contained in:
parent
cac52e4917
commit
9f301dfe8b
@ -34,7 +34,13 @@ spec:
|
|||||||
hasDns: "true"
|
hasDns: "true"
|
||||||
|
|
||||||
securityContext:
|
securityContext:
|
||||||
|
capabilities:
|
||||||
|
drop: [ALL]
|
||||||
|
add: [NET_BIND_SERVICE]
|
||||||
|
readOnlyRootFilesystem: true
|
||||||
|
runAsGroup: 0
|
||||||
runAsNonRoot: false
|
runAsNonRoot: false
|
||||||
|
runAsUser: 0
|
||||||
|
|
||||||
affinity:
|
affinity:
|
||||||
podAntiAffinity:
|
podAntiAffinity:
|
||||||
|
Loading…
Reference in New Issue
Block a user