fix: Update controller deployment that supports Pod Security Admission (#167)

Signed-off-by: Rashed Kamal <[email protected]>
- Update controller deployment that supports Pod Security Admission

Author: rashedkvm

config/manager/manager.yaml

@@ -36,6 +36,12 @@ spec:
         name: manager
         securityContext:
           allowPrivilegeEscalation: false
+          runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
+          capabilities:
+            drop:
+            - ALL  
         livenessProbe:
           httpGet:
             path: /healthz

dist/source-controller.yaml

@@ -682,6 +682,12 @@ spec:
             memory: 20Mi
         securityContext:
           allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
         volumeMounts:
         - mountPath: /tmp/k8s-webhook-server/serving-certs
           name: cert