chore: fix PodSecurity warning

Signed-off-by: Craig Newton <newtondev@gmail.com>
argoproj · Mar 5, 2024 · 9e05954 · 9e05954
1 parent fd40796
commit 9e05954
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 0 deletions.
diff --git a/manifests/base/argo-rollouts-deployment.yaml b/manifests/base/argo-rollouts-deployment.yaml
@@ -44,6 +44,14 @@ spec:
           failureThreshold: 3
           successThreshold: 1
           timeoutSeconds: 4
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          seccompProfile:
+            type: RuntimeDefault
       securityContext:
         runAsNonRoot: true
   strategy:

diff --git a/manifests/install.yaml b/manifests/install.yaml
@@ -16051,6 +16051,14 @@ spec:
           periodSeconds: 5
           successThreshold: 1
           timeoutSeconds: 4
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          seccompProfile:
+            type: RuntimeDefault
       securityContext:
         runAsNonRoot: true
       serviceAccountName: argo-rollouts
diff --git a/manifests/namespace-install.yaml b/manifests/namespace-install.yaml
@@ -413,6 +413,14 @@ spec:
           periodSeconds: 5
           successThreshold: 1
           timeoutSeconds: 4
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          seccompProfile:
+            type: RuntimeDefault
       securityContext:
         runAsNonRoot: true
       serviceAccountName: argo-rollouts