improve security in pod

Signed-off-by: Scott Trent <[email protected]>
sustainable-computing-io · Sep 10, 2024 · 584ce38 · 584ce38
1 parent 4c660b3
commit 584ce38
Showing 1 changed file with 9 additions and 6 deletions.
diff --git a/config/default/manager_config_patch.yaml b/config/default/manager_config_patch.yaml
@@ -8,9 +8,12 @@ spec:
     spec:
       containers:
       - name: manager
-      securityContext:
-        allowPrivilegeEscalation: false
-        runAsNonRoot: true
-        capabilities:
-          drop:
-          - ALL
+        imagePullPolicy: Always
+        securityContext:
+          runAsUser: 11001
+          runAsGroup: 11001
+          allowPrivilegeEscalation: false
+          runAsNonRoot: true
+          capabilities:
+            drop:
+            - ALL