node-feature-discovery/deployment/components/common/securitycontext.yaml at a5624cc8ca3cf9f78590fb2ae1398b43d476cc6c - mirrors/node-feature-discovery - Code den of a Norwegian 🐻

mirrors/node-feature-discovery

mirror of https://github.com/kubernetes-sigs/node-feature-discovery.git synced 2024-12-14 11:57:51 +00:00

Markus Lehtonen 8117c099a3 deployment: add kustomize base

Implement functionality virtually replicating deployment templates for
nfd-master and nfd-worker daemonset (nfd-master.yaml.template and
nfd-worker-daemonset.yaml.template) by adding a kustomize overlay named
"default".

We split the resources into multiple bases (rbac, master and
worker-daemonset) so that relevant parts are re-usable in
other deployment scenarios added later (e.g. "one-shot job", and
"combined daemonset").

This patch adds one component (components/common) doing the required
kustomization for the example deployment.

2021-08-18 14:05:57 +03:00

8 lines

208 B

YAML

Raw Blame History

 - op: add
   path: "/spec/template/spec/containers/0/securityContext"
   value:
     allowPrivilegeEscalation: false
     capabilities:
       drop: ["ALL"]
     readOnlyRootFilesystem: true
     runAsNonRoot: true