Skip to content
Snippets Groups Projects
Verified Commit 3c1c6903 authored by Sheogorath's avatar Sheogorath :european_castle:
Browse files

feat(blog): Make blog deployment PSS restricted conform

parent c385d6c4
No related branches found
No related tags found
No related merge requests found
......@@ -24,7 +24,7 @@ spec:
topologyKey: kubernetes.io/hostname
automountServiceAccountToken: false
containers:
- name: dnsproxy
- name: blog
image: quay.io/shivering-isles/blog:latest
imagePullPolicy: Always
ports:
......@@ -52,6 +52,15 @@ spec:
failureThreshold: 1
successThreshold: 3
periodSeconds: 5
securityContext:
capabilities:
drop:
- ALL
securityContext:
allowPrivilegeEscalation: false
unAsNonRoot: true
seccompProfile:
type: RuntimeDefault
---
apiVersion: v1
kind: Service
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment