Add securityContext

Related to kontena#33, but setting user also works without moficiations of Dockerfile
SimonDreher · Oct 26, 2020 · 6635a71 · 6635a71
1 parent aa9bd1f
commit 6635a71
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/deploy/operator.yaml b/deploy/operator.yaml
@@ -33,6 +33,14 @@ spec:
             limits:
               cpu: 100m
               memory: 64Mi
+          securityContext:
+            runAsUser: 1001
+            runAsNonRoot: true
+            privileged: false
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            capabilities:
+              drop: ["all"]
           env:
             - name: WATCH_NAMESPACE
               value: ""