v3.0.663

env0 · Jan 31, 2024 · 361479c · 361479c
1 parent 25891c1
commit 361479c
Showing 1 changed file with 10 additions and 4 deletions.
diff --git a/templates/_helpers.tpl b/templates/_helpers.tpl
@@ -19,11 +19,17 @@
 {{ end }}
 {{- end -}}
 
-{{- define "env0-agent.strict-security-context" -}}
-{{ if .Values.strictSecurityContext }}
+{{- define "env0-agent.strict-security-context" }}
+{{- if .Values.strictSecurityContext }}
 securityContext:
+  allowPrivilegeEscalation: false
+  seccompProfile:
+      type: RuntimeDefault
+  capabilities:
+    drop:
+      - ALL
   readOnlyRootFilesystem: true
   runAsNonRoot: true
   runAsUser: 1000 # run as non-root "node" user
-{{ end }}
-{{- end -}}
+{{- end }}
+{{- end }}