more security context settings.

bcgov · Oct 5, 2024 · b331496 · b331496
1 parent aed9c87
commit b331496
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/charts/app/values.yaml b/charts/app/values.yaml
@@ -54,6 +54,7 @@ rctool:
         - NET_BIND_SERVICE
     runAsNonRoot: true
     allowPrivilegeEscalation: false
+    readOnlyRootFilesystem: true
 
 frontend:
   # -- enable or disable a component deployment.
@@ -105,4 +106,5 @@ frontend:
         - NET_BIND_SERVICE
     runAsNonRoot: true
     allowPrivilegeEscalation: false
+    readOnlyRootFilesystem: true