From 532d8570a0a53b5b27483c6c5540c2f136cfc1e8 Mon Sep 17 00:00:00 2001 From: titusvermesan Date: Mon, 21 Oct 2024 13:49:42 +0200 Subject: [PATCH] securiry --- argocd/apps/minio/minio.yaml | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/argocd/apps/minio/minio.yaml b/argocd/apps/minio/minio.yaml index d7f5cdd..5c27b37 100644 --- a/argocd/apps/minio/minio.yaml +++ b/argocd/apps/minio/minio.yaml @@ -45,14 +45,14 @@ spec: - name: apiIngress.annotations.traefik\.ingress\.kubernetes\.io\/router\.tls value: 'true' forceString: true -# - name: containerSecurityContext.allowPrivilegeEscalation -# value: 'false' -# - name: containerSecurityContext.capabilities.drop -# value: 'ALL' -# - name: containerSecurityContext.runAsNonRoot -# value: 'true' -# - name: containerSecurityContext.seccompProfile.type -# value: 'RuntimeDefault' + - name: containerSecurityContext.allowPrivilegeEscalation + value: 'false' + - name: containerSecurityContext.capabilities.drop + value: 'ALL' + - name: containerSecurityContext.runAsNonRoot + value: 'true' + - name: containerSecurityContext.seccompProfile.type + value: 'RuntimeDefault' chart: minio destination: server: 'https://kubernetes.default.svc'