Skip to content
Snippets Groups Projects
Unverified Commit 88e91b94 authored by Kenny Leung's avatar Kenny Leung Committed by GitHub
Browse files

add securityContext to deployment. (#678) 


Signed-off-by: default avatarKenny Leung <kleung@chainguard.dev>
parent 0169c76c
No related branches found
No related tags found
No related merge requests found
Hide whitespace changes
Inline Side-by-side
config/rekor.yaml
+ 6
− 0
View file @ 88e91b94
...@@ -79,6 +79,12 @@ spec: ...@@ -79,6 +79,12 @@ spec:
requests: requests:
memory: "1G" memory: "1G"
cpu: ".5" cpu: ".5"
securityContext:
readOnlyRootFilesystem: true
runAsNonRoot: true
capabilities:
drop:
- all
--- ---
apiVersion: v1 apiVersion: v1
kind: Service kind: Service
......
config/watcher.yaml
+ 6
− 0
View file @ 88e91b94
...@@ -54,3 +54,9 @@ spec: ...@@ -54,3 +54,9 @@ spec:
requests: requests:
memory: "1G" memory: "1G"
cpu: ".5" cpu: ".5"
securityContext:
readOnlyRootFilesystem: true
runAsNonRoot: true
capabilities:
drop:
- all
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment