feat: security improvements for new foundry version

wittdennis · Dec 27, 2024 · 67c1861 · 67c1861
1 parent 94a3019
commit 67c1861
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/argo-apps/in-cluster/foundry-app.cd.yaml b/argo-apps/in-cluster/foundry-app.cd.yaml
@@ -21,6 +21,24 @@ spec:
       releaseName: test
       values: |
 
+        image:
+          tag: 13.334.0
+        podSecurityContext:
+          runAsNonRoot: true
+          runAsUser: 1000
+          runAsGroup: 1000
+          fsGroup: 1000
+          fsGroupChangePolicy: OnRootMismatch
+          seccompProfile:
+            type: RuntimeDefault
+        securityContext:
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: false
+          seccompProfile:
+            type: RuntimeDefault
+          runAsUser: 1000
+          runAsGroup: 1000
+          runAsNonRoot: true
         config:
           enableTelemetry: true
         existingSecret: