From 4497e7fb68a97f9a418c14b5652d9255a2e9c735 Mon Sep 17 00:00:00 2001
From: ston1th <ston1th@giftfish.de>
Date: Sat, 30 Nov 2019 12:28:10 +0100
Subject: [PATCH] updated psp

---
 config/01-podsecuritypolicy.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/config/01-podsecuritypolicy.yaml b/config/01-podsecuritypolicy.yaml
index 3667a17..449b28c 100644
--- a/config/01-podsecuritypolicy.yaml
+++ b/config/01-podsecuritypolicy.yaml
@@ -5,6 +5,9 @@ metadata:
 spec:
   privileged: false
   allowPrivilegeEscalation: false
+  requiredDropCapabilities:
+  - ALL
+  readOnlyRootFilesystem: true
   volumes:
   - 'secret'
   hostNetwork: false