#184 add Pod securityContext

2018-12-11 20:10:31 +01:00
parent a942e64d70
commit 68dc334234
2 changed files with 9 additions and 1 deletions
--- a/deploy/deployment.yaml
+++ b/deploy/deployment.yaml
@@ -40,3 +40,7 @@ spec:
          requests:
            cpu: 50m
            memory: 50Mi
+        securityContext:
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
--- a/deploy/redis-deployment.yaml
+++ b/deploy/redis-deployment.yaml
@@ -1,4 +1,4 @@
-apiVersion: extensions/v1beta1
+apiVersion: apps/v1
 kind: Deployment
 metadata:
  labels:
@@ -32,3 +32,7 @@ spec:
          requests:
            cpu: 50m
            memory: 50Mi
+        securityContext:
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000