whoami: Drop privileges

2024-08-25 00:21:24 +03:00 · 2024-08-25 00:21:24 +03:00 · d8402bdec5
commit d8402bdec5
parent a71bd5de37
1 changed files with 7 additions and 2 deletions
--- a/whoami/application.yml
+++ b/whoami/application.yml
@ -14,6 +14,9 @@ spec:
      labels:
        app: whoami
    spec:
+      securityContext:
+        runAsUser: 65534
+        runAsGroup: 65534
      containers:
        - name: whoami
          image: traefik/whoami
@ -24,6 +27,8 @@ spec:
            requests:
              cpu: 1m
              memory: 2Mi
+          securityContext:
+            readOnlyRootFilesystem: true
          ports:
            - containerPort: 80
              protocol: TCP