Improve spiffe-csi security-context

Co-authored-by: Faisal Memon <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:15 +01:00
parent 4e1d3d78bb
commit 50846ebe9a
1 changed files with 4 additions and 0 deletions
@@ -56,6 +56,10 @@ spec:
              mountPropagation: Bidirectional
              name: mountpoint-dir
          securityContext:
+            readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+                - all
            privileged: true
          resources:
            {{- toYaml .Values.resources | nindent 12 }}