Add runAsNonRoot: true and allowPrivilegeEscalation: false to the specs

Signed-off-by: Volodymyr Zotov <volodymyr.zotov@gmail.com>
2025-10-22 15:38:06 +00:00 · 2023-02-28 15:59:17 -06:00
parent ea8773bfee
commit 702974f750
3 changed files with 10 additions and 0 deletions
--- a/config/default/manager_auth_proxy_patch.yaml
+++ b/config/default/manager_auth_proxy_patch.yaml
@@ -8,6 +8,8 @@ metadata:
 spec:
  template:
    spec:
+      securityContext:
+        runAsNonRoot: true
      containers:
      - name: kube-rbac-proxy
        securityContext:
--- a/config/default/manager_config_patch.yaml
+++ b/config/default/manager_config_patch.yaml
@@ -6,6 +6,8 @@ metadata:
 spec:
  template:
    spec:
+      securityContext:
+        runAsNonRoot: true
      containers:
      - name: manager
        args: