panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Introduce ReadOnlyRootFilesystem for Tornjak frontend (#110)

Browse Source 
Signed-off-by: Mariusz Sabath <[email protected]>
This commit is contained in:
Mariusz Sabath
2023-11-16 15:47:04 -08:00
committed by GitHub
parent 911f51b679
commit c9885de539
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
examples/production/values.yaml
+1 -1
View File
@@ -124,7 +124,7 @@ tornjak-frontend:
securityContext:
allowPrivilegeEscalation: false
runAsNonRoot: true
readOnlyRootFilesystem: false
readOnlyRootFilesystem: true
capabilities:
drop: [ALL]
seccompProfile: