Set securityContext

Signed-off-by: Jeroen Rijken <[email protected]>
crowdsecurity · Mar 3, 2023 · c29e842 · c29e842
1 parent f82c8f2
commit c29e842
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/charts/crowdsec/templates/tests/test_lapi_up.yaml b/charts/crowdsec/templates/tests/test_lapi_up.yaml
@@ -16,4 +16,16 @@ spec:
       - -ec
       - |
         curl -XGET http://{{ .Release.Name }}-service:8080/health
-  restartPolicy: Never
+    securityContext:
+      allowPrivilegeEscalation: false
+      capabilities:
+        drop:
+          - ALL
+      privileged: false
+      readOnlyRootFilesystem: true
+      runAsGroup: {{ .Values.securityContext.runAsGroup | default "10000" }}
+      runAsNonRoot: true
+      runAsUser: {{ .Values.securityContext.runAsUser | default "10000" }}
+      seccompProfile:
+        type: RuntimeDefault
+  restartPolicy: Never