fix: add security contexts to SUC

Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-02-01 07:17:55 -05:00
1 parent 6cb24b86c1
commit 61d7806f18
@@ -46,6 +46,12 @@ spec:
                valueFrom:
                  fieldRef:
                    fieldPath: metadata.namespace
+            securityContext:
+              allowPrivilegeEscalation: false
+              readOnlyRootFilesystem: true
+              capabilities: { drop: ["ALL"] }
+              seccompProfile:
+                type: RuntimeDefault
        pod:
          securityContext:
            runAsUser: 65534