updated psp

config/200-psp.yaml

@@ -3,17 +3,22 @@ apiVersion: policy/v1beta1
 kind: PodSecurityPolicy
 metadata:
   name: pvc-reaper
+  annotations:
+    apparmor.security.beta.kubernetes.io/allowedProfileNames: 'runtime/default'
+    apparmor.security.beta.kubernetes.io/defaultProfileName: 'runtime/default'
+    seccomp.security.alpha.kubernetes.io/allowedProfileNames: 'docker/default'
+    seccomp.security.alpha.kubernetes.io/defaultProfileName: 'docker/default'
 spec:
   privileged: false
   allowPrivilegeEscalation: false
-  requiredDropCapabilities:
-  - ALL
+  requiredDropCapabilities: ["ALL"]
   readOnlyRootFilesystem: true
+  volumes: ["secret"]
   hostNetwork: false
   hostIPC: false
   hostPID: false
   runAsUser:
-    rule: 'RunAsAny'
+    rule: 'MustRunAsNonRoot'
   seLinux:
     rule: 'RunAsAny'
   supplementalGroups: