whoami: Drop privileges

whoami/application.yml

@@ -14,6 +14,9 @@ spec:
       labels:
         app: whoami
     spec:
+      securityContext:
+        runAsUser: 65534
+        runAsGroup: 65534
       containers:
         - name: whoami
           image: traefik/whoami
@@ -24,9 +27,11 @@ spec:
             requests:
               cpu: 1m
               memory: 2Mi
+          securityContext:
+            readOnlyRootFilesystem: true
           ports:
-          - containerPort: 80
-            protocol: TCP
+            - containerPort: 80
+              protocol: TCP
 ---
 apiVersion: v1
 kind: Service