feat: enabled monitors everywhere and standardize resources a bit (#1281)

* feat: enabled monitors everywhere and standardize resources a bit Signed-off-by: Devin Buhl <devin@buhl.casa> * add raw tags --------- Signed-off-by: Devin Buhl <devin@buhl.casa>
2024-01-31 18:01:47 -05:00
1 parent b24a55e790
commit c59d03c69e
@@ -48,16 +48,22 @@ spec:
              readiness: *probes
              startup:
                enabled: false
+            securityContext:
+              allowPrivilegeEscalation: false
+              readOnlyRootFilesystem: true
+              capabilities: { drop: ["ALL"] }
+              seccompProfile:
+                type: RuntimeDefault
            resources:
              requests:
-                cpu: 5m
-                memory: 10M
+                cpu: 10m
              limits:
-                memory: 64M
+                memory: 64Mi
        pod:
          securityContext:
-            runAsUser: 568
-            runAsGroup: 568
+            runAsNonRoot: true
+            runAsUser: 65534
+            runAsGroup: 65534
    service:
      main:
        ports: