cluster

commit 76110c3a30062f077485a7110ebdf42952b9d87f
parent 9b7995a5f28b6987aca8fe4b86067fcb07cb6f67
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Sun, 22 Mar 2026 01:07:15 +0100

fix image

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
apps/talos_cluster/k6-operator/cronjobs.yaml
 | 
44
++++++++++++++++++++++++++++++++++++++++----

1 file changed, 40 insertions(+), 4 deletions(-)
diff --git a/apps/talos_cluster/k6-operator/cronjobs.yaml b/apps/talos_cluster/k6-operator/cronjobs.yaml
@@ -27,9 +27,18 @@ spec:
         spec:
           serviceAccountName: k6-cronjob
           restartPolicy: OnFailure
+          securityContext:
+            runAsNonRoot: true
+            seccompProfile:
+              type: RuntimeDefault
           containers:
             - name: runner
-              image: bitnami/kubectl:1.32
+              image: docker.io/alpine/k8s:1.32.3
+              securityContext:
+                allowPrivilegeEscalation: false
+                capabilities:
+                  drop:
+                    - ALL
               command:
                 - /bin/sh
                 - -c
@@ -88,9 +97,18 @@ spec:
         spec:
           serviceAccountName: k6-cronjob
           restartPolicy: OnFailure
+          securityContext:
+            runAsNonRoot: true
+            seccompProfile:
+              type: RuntimeDefault
           containers:
             - name: runner
-              image: bitnami/kubectl:1.32
+              image: docker.io/alpine/k8s:1.32.3
+              securityContext:
+                allowPrivilegeEscalation: false
+                capabilities:
+                  drop:
+                    - ALL
               command:
                 - /bin/sh
                 - -c
@@ -149,9 +167,18 @@ spec:
         spec:
           serviceAccountName: k6-cronjob
           restartPolicy: OnFailure
+          securityContext:
+            runAsNonRoot: true
+            seccompProfile:
+              type: RuntimeDefault
           containers:
             - name: runner
-              image: bitnami/kubectl:1.32
+              image: docker.io/alpine/k8s:1.32.3
+              securityContext:
+                allowPrivilegeEscalation: false
+                capabilities:
+                  drop:
+                    - ALL
               command:
                 - /bin/sh
                 - -c
@@ -210,9 +237,18 @@ spec:
         spec:
           serviceAccountName: k6-cronjob
           restartPolicy: OnFailure
+          securityContext:
+            runAsNonRoot: true
+            seccompProfile:
+              type: RuntimeDefault
           containers:
             - name: runner
-              image: bitnami/kubectl:1.32
+              image: docker.io/alpine/k8s:1.32.3
+              securityContext:
+                allowPrivilegeEscalation: false
+                capabilities:
+                  drop:
+                    - ALL
               command:
                 - /bin/sh
                 - -c