cluster

commit 79e277730e733cf17853decb89f40db05aa32675
parent 5b7bf06a60bc61aa68a0c86f732e7ae1fc8eb1f1
Author: MTRNord <mtrnord1@gmail.com>
Date:   Tue, 16 Apr 2024 19:01:16 +0200

try kubeaudit

Diffstat:
M
.gitignore
 | 
1
+
M
apps/base/matrix/sliding-proxy/deployment.yaml
 | 
7
+++++++

2 files changed, 8 insertions(+), 0 deletions(-)
diff --git a/.gitignore b/.gitignore
@@ -1,2 +1,3 @@
 age.agekey
 bak_synapse.txt
+audit.txt
diff --git a/apps/base/matrix/sliding-proxy/deployment.yaml b/apps/base/matrix/sliding-proxy/deployment.yaml
@@ -17,6 +17,8 @@ spec:
     metadata:
       labels:
         app: sliding-proxy-midnightthoughts
+      annotations:
+        container.apparmor.security.beta.kubernetes.io/sliding-proxy-midnightthoughts-container: runtime/default
     spec:
       securityContext:
         #runAsNonRoot: true
@@ -57,6 +59,11 @@ spec:
                 - ALL
             readOnlyRootFilesystem: true
             #runAsNonRoot: true
+
+            privileged: false
+            runAsNonRoot: true
+          resources: {}
+  strategy: {}
 ---
 apiVersion: image.toolkit.fluxcd.io/v1beta2
 kind: ImagePolicy