whoami: Drop privileges

whoami/application.yml

@@ -14,6 +14,9 @@ spec:
       labels:
         app: whoami
     spec:
+      securityContext:
+        runAsUser: 65534
+        runAsGroup: 65534
       containers:
         - name: whoami
           image: traefik/whoami
@@ -24,6 +27,8 @@ spec:
             requests:
               cpu: 1m
               memory: 2Mi
+          securityContext:
+            readOnlyRootFilesystem: true
           ports:
             - containerPort: 80
               protocol: TCP