Skip to content
Snippets Groups Projects
Commit efe686c0 authored by Max Inden's avatar Max Inden Committed by GitHub
Browse files

security: Enforce nobody user and read only / (#1393) 

* Make the Prometheus Operator Docker image run as `nobody` by default.
* Disallow privilege escalation via K8s
* Enforce read only root filesystem
parent dabfca59
Branches
Tags
Hide whitespace changes
Inline Side-by-side
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment