Skip to content

Commit d7e5281

Browse files
authored
Update values.yaml
1 parent cb49066 commit d7e5281

File tree

1 file changed

+13
-4
lines changed

1 file changed

+13
-4
lines changed

values.yaml

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -155,12 +155,21 @@ configData:
155155
threshold: 3
156156

157157
containerSecurityContext:
158-
enabled: false
159-
160-
securityContext:
161158
enabled: true
162159
runAsUser: 1000
163-
fsGroup: 1000
160+
161+
podSecurityContext:
162+
allowPrivilegeEscalation: false
163+
capabilities:
164+
drop:
165+
- ALL
166+
privileged: false
167+
readOnlyRootFilesystem: true
168+
runAsGroup: 1000
169+
runAsNonRoot: true
170+
runAsUser: 1000
171+
seccompProfile:
172+
type: RuntimeDefault
164173

165174
priorityClassName: ""
166175

0 commit comments

Comments
 (0)