diff --git a/deployments/mariadb/mariadb-deployment.yml b/deployments/mariadb/mariadb-deployment.yml index 3e78263..bae51cb 100644 --- a/deployments/mariadb/mariadb-deployment.yml +++ b/deployments/mariadb/mariadb-deployment.yml @@ -1,3 +1,16 @@ +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: default-deny + namespace: mariadb +spec: + podSelector: {} + policyTypes: + - Ingress + - Egress + +--- + apiVersion: apps/v1 kind: Deployment metadata: @@ -23,10 +36,10 @@ spec: runAsNonRoot: true # Containers should run as a high UID to avoid host conflict runAsUser: 103306 # Using high UID to avoid conflicts readOnlyRootFilesystem: true # Use read-only filesystem for containers where possible - seLinuxOptions: - type: "docker/default" # Ensure that the seccomp profile is set to docker/default or runtime/default + seccompProfile: + type: RuntimeDefault # Ensure that the seccomp profile is set to docker/default or runtime/default containers: - - image: mariadb@sha256:placeholder_digest + - image: mariadb:10.6@sha256:placeholder_digest name: mariadb imagePullPolicy: Always securityContext: