From 0845b0f227f76bb1c11653eb03566475e337d3cb Mon Sep 17 00:00:00 2001
From: Ilya Kheifets <ikheifets@splunk.com>
Date: Sun, 8 Dec 2024 23:28:59 +0100
Subject: [PATCH] fix: try

Signed-off-by: Ilya Kheifets <ikheifets@splunk.com>
---
 .../templates/worker/flower/deployment.yaml          | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/charts/splunk-connect-for-snmp/templates/worker/flower/deployment.yaml b/charts/splunk-connect-for-snmp/templates/worker/flower/deployment.yaml
index 70e197e5c..2e63a68eb 100644
--- a/charts/splunk-connect-for-snmp/templates/worker/flower/deployment.yaml
+++ b/charts/splunk-connect-for-snmp/templates/worker/flower/deployment.yaml
@@ -14,8 +14,20 @@ spec:
       labels:
         app: flower
     spec:
+      {{- with .Values.imagePullSecrets }}
+      imagePullSecrets:
+        {{- toYaml . | nindent 8 }}
+      {{- end }}
       containers:
         - name: flower
+          securityContext:
+            capabilities:
+              drop:
+                - ALL
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+            runAsUser: 10001
+            runAsGroup: 10001
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           args: