Skip to content

Commit 944d52c

Browse files
committed
add security context
1 parent 6d505a4 commit 944d52c

1 file changed

Lines changed: 8 additions & 0 deletions

File tree

microservices/dlstreamer-pipeline-server/helm/templates/dlstreamer-pipeline-server-deployment.yaml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,14 @@ spec:
4646
value: {{ $.Values.env.https_proxy }}
4747
- name: no_proxy
4848
value: {{ $.Values.env.no_proxy }}
49+
securityContext:
50+
runAsNonRoot: true
51+
runAsUser: 1000
52+
allowPrivilegeEscalation: false
53+
readOnlyRootFilesystem: false # <-- required since apk/git/wget are used and files are copied
54+
capabilities:
55+
drop:
56+
- ALL
4957

5058
containers:
5159
- name: dlstreamer-pipeline-server

0 commit comments

Comments
 (0)