Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add security settings to deployment #36

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Add security settings to deployment #36

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
aa9bd1f
Add resource requests and limits
SimonDreher Oct 26, 2020
6635a71
Add securityContext
SimonDreher Oct 26, 2020
5927aa2
Add NetworkPolicy
SimonDreher Oct 26, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions deploy/networkpolicy.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: kubelet-rubber-stamp
namespace: kube-system
spec:
podSelector:
matchLabels:
name: kubelet-rubber-stamp
policyTypes:
- Ingress
# Deny all ingress traffic
ingress: []
15 changes: 15 additions & 0 deletions deploy/operator.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,21 @@ spec:
args:
- "--v=2"
imagePullPolicy: Always
resources:
requests:
cpu: 10m
memory: 16Mi
limits:
cpu: 100m
memory: 64Mi
securityContext:
runAsUser: 1001
runAsNonRoot: true
privileged: false
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
capabilities:
drop: ["all"]
env:
- name: WATCH_NAMESPACE
value: ""
Expand Down