update

Syntax3rror404 · Aug 24, 2024 · 2783b8e · 2783b8e
1 parent f8bc071
commit 2783b8e
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 1 deletion.
diff --git a/chart/templates/deployment.yaml b/chart/templates/deployment.yaml
@@ -19,6 +19,15 @@ spec:
         imagePullPolicy: {{ .Values.image.pullPolicy }}
         ports:
         - containerPort: {{ .Values.service.port }}
+        securityContext:
+          runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
+          runAsUser: {{ .Values.securityContext.runAsUser }}
+          allowPrivilegeEscalation: {{ .Values.securityContext.allowPrivilegeEscalation }}
+          capabilities:
+            drop:
+              {{- toYaml .Values.securityContext.capabilities.drop | nindent 14 }}
+          seccompProfile:
+            type: {{ .Values.securityContext.seccompProfile.type }}
         volumeMounts:
         - name: home-volume
           mountPath: /home/dev

diff --git a/chart/values.yaml b/chart/values.yaml
@@ -14,4 +14,14 @@ persistence:
   size: 10Gi
   storageClass: "longhorn"
 
-resources: {}
+resources: {}
+
+securityContext:
+  runAsNonRoot: true
+  runAsUser: 1001
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+      - ALL
+  seccompProfile:
+    type: RuntimeDefault