From 1f3f6a35e4aa45539929f0bf038b50752674fb20 Mon Sep 17 00:00:00 2001
From: Rene Luria <rene.luria@infomaniak.com>
Date: Fri, 2 May 2025 16:53:48 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=9B=A0=EF=B8=8F=20deploy.yaml=20->=20Secu?=
 =?UTF-8?q?rity=20updates=20added=20restrictions?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 deploy/deploy.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/deploy/deploy.yaml b/deploy/deploy.yaml
index 30d6669..2ff2e46 100644
--- a/deploy/deploy.yaml
+++ b/deploy/deploy.yaml
@@ -39,4 +39,9 @@ spec:
               cpu: 10m
               memory: 50Mi
           securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - all
+            privileged: false
             readOnlyRootFilesystem: true