Merge pull request #11894 from spadgett/yaml-template-restricted-secu…

…rity Bug 2112146: Update pod YAML sample for restricted pod security admission policy
openshift · Jul 29, 2022 · 6a16c2b · 6a16c2b
2 parents 6c4aadd + ae060af
commit 6a16c2b
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/frontend/public/models/yaml-templates.ts b/frontend/public/models/yaml-templates.ts
@@ -379,11 +379,20 @@ metadata:
   labels:
     app: httpd
 spec:
+  securityContext:
+    runAsNonRoot: true
+    seccompProfile:
+      type: RuntimeDefault
   containers:
     - name: httpd
       image: image-registry.openshift-image-registry.svc:5000/openshift/httpd:latest
       ports:
         - containerPort: 8080
+      securityContext:
+        allowPrivilegeEscalation: false
+        capabilities:
+          drop:
+          - ALL
 `,
   )
   .setIn(