ston1th/webhook-interceptor
0
0
Fork 0
Code Issues Pull requests Releases Activity

updated psp

Browse source
This commit is contained in:
ston1th 2019-11-30 12:28:10 +01:00
commit 4497e7fb68
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
config/01-podsecuritypolicy.yaml
View file

@ -5,6 +5,9 @@ metadata:
spec: spec:
privileged: false privileged: false
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
requiredDropCapabilities:
- ALL
readOnlyRootFilesystem: true
volumes: volumes:
- 'secret' - 'secret'
hostNetwork: false hostNetwork: false