global

giantswarm · Nov 21, 2023 · 1aa40ce · 1aa40ce
1 parent 311e399
commit 1aa40ce
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/helm/cert-manager-app/values.yaml b/helm/cert-manager-app/values.yaml
@@ -496,5 +496,18 @@ startupapicheck:
     # Automount API credentials for a Service Account.
     automountServiceAccountToken: true
 
+securityContext:
+  runAsNonRoot: true
+  seccompProfile:
+    type: RuntimeDefault
+
+containerSecurityContext:
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+    - ALL
+  readOnlyRootFilesystem: true
+  runAsNonRoot: true
+
 ciliumNetworkPolicy:
   enabled: false