MOB-148: added missing fileds for podSecContext

4 years ago · e487283aaf
parent 6d6672fbbb
commit e487283aaf
1 changed files with 7 additions and 0 deletions
--- a/config/kustomize/base/resources/deployment.yaml
+++ b/config/kustomize/base/resources/deployment.yaml
@ -13,10 +13,17 @@ spec:
      labels:
        app: keycloak
    spec:
+      securitycontext:
+        allowPrivilegeEscalation: false
+        runAsNonRoot: true
+        capabilities:
+          drop: ["ALL"]
      containers:
      - 
        image: staged-harbor-01.smardigo.digital/smardigo/keycloak:14.0.0.1
        imagePullPolicy: IfNotPresent
+        securitycontext:
+          runAsUser: 2000
        ports:
        - name: app-port
          containerPort: 8080