diff --git a/manifests/deployment.yaml b/manifests/deployment.yaml index 5944784..2295f47 100644 --- a/manifests/deployment.yaml +++ b/manifests/deployment.yaml @@ -37,10 +37,10 @@ spec: memory: "512Mi" cpu: "250m" securityContext: - allowPrivilegeEscalation: true + allowPrivilegeEscalation: false capabilities: drop: ["ALL"] - runAsNonRoot: false + runAsNonRoot: true seccompProfile: type: RuntimeDefault volumes: