training

2026-09-03 13:41:35 +00:00
parent 24b9717db2
commit f929a46d2b
9 changed files with 90 additions and 1 deletions
--- a/pod-sec/101-pod.yaml
+++ b/pod-sec/101-pod.yaml
@ -10,4 +10,10 @@ spec:
    resources: {}
    ports:
      - containerPort: 3000
-
+    securityContext:
+      allowPrivilegeEscalation: false
+      runAsNonRoot: true
+      seccompProfile:
+        type: RuntimeDefault
+      capabilities:
+        drop: ["ALL"]