Add securityContext for restoreSessions

Signed-off-by: Arnob kumar saha <[email protected]>
appscode-cloud · Jan 3, 2025 · 4e0d5ea · 4e0d5ea
1 parent 2055ff0
commit 4e0d5ea
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/charts/corekubestashcom-restoresession-editor-options/templates/restoresession.yaml b/charts/corekubestashcom-restoresession-editor-options/templates/restoresession.yaml
@@ -30,6 +30,20 @@ spec:
     {{- if and .Values.spec.addon.jobTemplate .Values.spec.addon.jobTemplate.securityContext }}
     jobTemplate:
       spec:
+        nodeSelector:
+          kubernetes.io/os: linux
         securityContext:
           runAsUser: {{ .Values.spec.addon.jobTemplate.securityContext }}
+          runAsGroup: 0
+    containerRuntimeSettings:
+      securityContext:
+        allowPrivilegeEscalation: false
+        capabilities:
+          drop:
+            - ALL
+        runAsGroup: 0
+        runAsNonRoot: true
+        runAsUser: {{ .Values.spec.addon.jobTemplate.securityContext }}
+        seccompProfile:
+          type: RuntimeDefault
     {{- end }}