Merge pull request #34 from OpenShiftDemos/jnewsome97-patch-1

LGTM, thanks.
OpenShiftDemos · Jan 9, 2024 · 6ca1b81 · 6ca1b81
2 parents f57521f + 921cb06
commit 6ca1b81
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/documentation/modules/ROOT/pages/03-kustomize.adoc b/documentation/modules/ROOT/pages/03-kustomize.adoc
@@ -129,6 +129,15 @@ spec:
       - image: quay.io/redhatworkshops/welcome-php:latest
         name: welcome-php
         resources: {}
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
 ----
 
 === Kustomize `edit`
@@ -206,6 +215,15 @@ spec:
       - image: quay.io/redhatworkshops/welcome-php:ffcd15
         name: welcome-php
         resources: {}
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
 ----
 
 [NOTE]