feat(infrastructure): automatic deploy

2026-03-22 23:20:56 +01:00 · 2025-10-05 20:44:14 +02:00
parent 8e1d65a078
commit 384d5004eb
3 changed files with 17 additions and 1 deletions
--- a/7project/charts/myapp-chart/templates/worker-deployment.yaml
+++ b/7project/charts/myapp-chart/templates/worker-deployment.yaml
@@ -13,10 +13,18 @@ spec:
      labels:
        app: {{ printf "%s-worker" .Values.app.name }}
    spec:
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
      containers:
        - name: {{ printf "%s-worker" .Values.app.name }}
          image: "{{- if .Values.image.digest -}}{{ .Values.image.repository }}@{{ .Values.image.digest }}{{- else -}}{{ .Values.image.repository }}:{{ default "latest" .Values.image.tag }}{{- end -}}"
          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop: ["ALL"]
          command:
            - celery
            - -A