non-root user has been added in the deployment.yml file

dfds · Jan 8, 2024 · 0767666 · 0767666
1 parent 9efa6ea
commit 0767666
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/k8s/deployment.yml b/k8s/deployment.yml
@@ -23,6 +23,11 @@ spec:
       containers:
         - name: k8s-janitor
           image: 579478677147.dkr.ecr.eu-central-1.amazonaws.com/ded/k8s-janitor:$(Build.BuildId)
+          securityContext:
+            runAsUser: 10001
+            runAsGroup: 3000
+            runAsNonRoot: true
+            allowPrivilegeEscalation: false
           ports:
             - containerPort: 8081
               name: web