Added securityContext to cronjob

Signed-off-by: biswajit-9776 <biswajitpatt139@gmail.com>
kubeflow · Aug 14, 2024 · 228fc62 · 228fc62
1 parent 066a34b
commit 228fc62
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.../configure-self-signed-kubernetes-oidc-issuer/cronjob.kubeflow-m2m-oidc-configurator.yaml b/.../configure-self-signed-kubernetes-oidc-issuer/cronjob.kubeflow-m2m-oidc-configurator.yaml
@@ -29,6 +29,14 @@ spec:
               name: script
               subPath: script.sh
             resources: {}
+            securityContext:
+              allowPrivilegeEscalation: false
+              seccompProfile:
+                type: RuntimeDefault
+              runAsNonRoot: true
+              capabilities:
+                drop:
+                - ALL
           volumes:
           - name: script
             configMap: