feat(chart): improve default containerSecurityContext

Signed-off-by: dntosas <ntosas@gmail.com>
dntosas · Jul 17, 2024 · 28ddcaa · 28ddcaa
1 parent a1ab9cd
commit 28ddcaa
Showing 1 changed file with 11 additions and 1 deletion.
diff --git a/charts/capi2argo-cluster-operator/values.yaml b/charts/capi2argo-cluster-operator/values.yaml
@@ -54,7 +54,17 @@ rbac:
   clusterRole: true
   apiVersion: v1
 
-containerSecurityContext: {}
+containerSecurityContext:
+  runAsNonRoot: true
+  runAsUser: 1001
+  privileged: false
+  allowPrivilegeEscalation: false
+  seccompProfile:
+    type: RuntimeDefault
+  capabilities:
+    drop:
+    - ALL
+
 podSecurityContext:
   enabled: true
   fsGroup: 1001