Update deployment.tpl.yml

ministryofjustice · Dec 3, 2024 · 96579fc · 96579fc
1 parent e64998e
commit 96579fc
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/deploy/development/deployment.tpl.yml b/deploy/development/deployment.tpl.yml
@@ -20,15 +20,16 @@ spec:
     spec:
       serviceAccountName: ${KUBE_NAMESPACE}-service
       securityContext:
-        allowPrivilegeEscalation: false
-        capabilities: 
-          drop: ["ALL"]
         runAsNonRoot: true
         seccompProfile:
           type: "RuntimeDefault"
       containers:
       - name: intranet-archive
         image: ${ECR_URL}:${IMAGE_TAG}
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities: 
+            drop: ["ALL"]
         resources:
           limits:
             cpu: 500m