feat: add kraan securitycontext

fidelity · Sep 7, 2023 · 4504a52 · 4504a52
1 parent c5ed28c
commit 4504a52
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/chart/templates/kraan/deployment.yaml b/chart/templates/kraan/deployment.yaml
@@ -43,6 +43,10 @@ spec:
           allowPrivilegeEscalation: false
           runAsNonRoot: {{ .Values.kraan.kraanController.runAsNonRoot }}
           readOnlyRootFilesystem: {{ .Values.kraan.kraanController.readOnly }}
+          capabilities:
+            drop: [ "ALL" ]
+          seccompProfile:
+            type: RuntimeDefault
         volumeMounts:
         - mountPath: /controller/data
           name: data