feat(infrastructure): automatic deploy

2026-03-22 23:20:56 +01:00 · 2025-10-05 20:44:14 +02:00
parent 8e1d65a078
commit 384d5004eb
3 changed files with 17 additions and 1 deletions
--- a/7project/charts/myapp-chart/templates/app-deployment.yaml
+++ b/7project/charts/myapp-chart/templates/app-deployment.yaml
@@ -13,10 +13,18 @@ spec:
      labels:
        app: {{ .Values.app.name }}
    spec:
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
      containers:
        - name: {{ .Values.app.name }}
          image: "{{- if .Values.image.digest -}}{{ .Values.image.repository }}@{{ .Values.image.digest }}{{- else -}}{{ .Values.image.repository }}:{{ default "latest" .Values.image.tag }}{{- end -}}"
          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop: ["ALL"]
          ports:
            - containerPort: {{ .Values.app.port }}
          env: