Merge pull request #17 from andrewh1978/chewram-security-context

add securitycontext
andrewh1978 · Dec 7, 2023 · 0a0fb30 · 0a0fb30
2 parents 2678d7e + 6f42a72
commit 0a0fb30
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/chewram.yml b/chewram.yml
@@ -7,7 +7,7 @@ apiVersion: v1
 kind: ConfigMap
 metadata:
   name: chewram
-  namespace: chewram
+  namespace: px-bench
 data:
   chewram.pl: |-
     #!/usr/bin/perl
@@ -38,7 +38,7 @@ apiVersion: apps/v1
 kind: DaemonSet
 metadata:
   name: chewram
-  namespace: chewram
+  namespace: px-bench
   labels:
     app: chewram
 spec:
@@ -70,6 +70,12 @@ spec:
           image: andrewh1978/px-bench
           imagePullPolicy: "IfNotPresent"
           command: [ "perl", "/chewram.pl" ]
+          securityContext:
+            allowPrivilegeEscalation: false
+            seccompProfile:
+              type: RuntimeDefault
+            capabilities:
+              drop: ["ALL"]
           readinessProbe:
             exec:
               command: [ "cat", "/ready" ]