enhance security context part for k8s deployment (#850)

2026-08-30 08:49:26 +00:00 · 2025-11-13 18:18:19 +08:00
parent d4817a4bea
commit 93090adf7c
2 changed files with 9 additions and 8 deletions
@@ -59,13 +59,12 @@ podSecurityContext:
  # fsGroup: 2000

 securityContext:
-  {}
-  # capabilities:
-  #   drop:
-  #   - ALL
-  # readOnlyRootFilesystem: true
-  # runAsNonRoot: true
-  # runAsUser: 1000
+  capabilities:
+    drop:
+    - ALL
+  readOnlyRootFilesystem: true
+  runAsNonRoot: true
+  runAsUser: 1000

 service:
  type: NodePort