Files
deploy/manifests/ha/base/redis-ha/overlays/statefulset-containers-securityContext.yaml

41 lines
940 B
YAML

- op: add
path: /spec/template/spec/initContainers/0/securityContext
value:
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
- op: add
path: /spec/template/spec/containers/0/securityContext
value:
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
- op: add
path: /spec/template/spec/containers/1/securityContext
value:
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
- op: add
path: /spec/template/spec/containers/2/securityContext
value:
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault