Add security context (#20)

ministryofjustice · Dec 3, 2024 · e64998e · e64998e
1 parent 348c176
commit e64998e
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/deploy/development/deployment.tpl.yml b/deploy/development/deployment.tpl.yml
@@ -19,6 +19,13 @@ spec:
         app: intranet-archive-dev
     spec:
       serviceAccountName: ${KUBE_NAMESPACE}-service
+      securityContext:
+        allowPrivilegeEscalation: false
+        capabilities: 
+          drop: ["ALL"]
+        runAsNonRoot: true
+        seccompProfile:
+          type: "RuntimeDefault"
       containers:
       - name: intranet-archive
         image: ${ECR_URL}:${IMAGE_TAG}