Skip to content

Commit f13d698

Browse files
authored
Merge pull request #46 from rptaylor/kube-vip-provider-seccontext
define minimal securityContext for cloud provider
2 parents b4c12c0 + 1eb7e25 commit f13d698

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

Diff for: charts/kube-vip-cloud-provider/templates/deployment.yaml

+4
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,10 @@ spec:
2222
imagePullPolicy: {{ .Values.image.pullPolicy }}
2323
resources:
2424
{{- toYaml .Values.resources | nindent 12 }}
25+
securityContext:
26+
allowPrivilegeEscalation: false
27+
seccompProfile:
28+
type: RuntimeDefault
2529
serviceAccountName: {{ include "kube-vip-cloud-provider.name" . }}
2630
{{- if .Values.nodeSelector }}
2731
nodeSelector:

0 commit comments

Comments
 (0)