node-feature-discovery/deployment/components/topology-updater/topologyupdater-securitycontext.yaml

- op: add
  path: "/spec/template/spec/containers/0/securityContext"
  value:
    allowPrivilegeEscalation: false
    capabilities:
      drop: ["ALL"]
    readOnlyRootFilesystem: true
    runAsUser: 0
topologyupdater: manifests: topologyupdater deployment files - create an overlay for deployment of all components - create an overlay for just topologyupdater deployment (to be deployed in conjunction with the default overlay) - create a separate overlay for deployment of master and topologyupdater-job Signed-off-by: Swati Sehgal <swsehgal@redhat.com> 2021-08-26 16:09:29 +01:00			`- op: add`
			`path: "/spec/template/spec/containers/0/securityContext"`
			`value:`
			`allowPrivilegeEscalation: false`
			`capabilities:`
			`drop: ["ALL"]`
			`readOnlyRootFilesystem: true`
			`runAsUser: 0`