whoami: Drop privileges

2024-08-25 00:21:24 +03:00
parent a71bd5de37
commit d8402bdec5
1 changed files with 7 additions and 2 deletions
--- a/whoami/application.yml
+++ b/whoami/application.yml
@@ -14,6 +14,9 @@ spec:
      labels:
        app: whoami
    spec:
+      securityContext:
+        runAsUser: 65534
+        runAsGroup: 65534
      containers:
        - name: whoami
          image: traefik/whoami
@@ -24,9 +27,11 @@ spec:
            requests:
              cpu: 1m
              memory: 2Mi
+          securityContext:
+            readOnlyRootFilesystem: true
          ports:
-          - containerPort: 80
-            protocol: TCP
+            - containerPort: 80
+              protocol: TCP
 ---
 apiVersion: v1
 kind: Service