Merge pull request kubernetes-sigs#4104 from chrischdi/prepare-securi…

…tycontext-for-restricted-psa add explicit securityContexts to the controller
cnmcavoy · Apr 6, 2023 · d96f41b · d96f41b
2 parents c1fd030 + 58a63b6
commit d96f41b
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -37,6 +37,17 @@ spec:
           httpGet:
             path: /healthz
             port: healthz
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          runAsUser: 65532
+          runAsGroup: 65532
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
       terminationGracePeriodSeconds: 10
       tolerations:
         - effect: NoSchedule