chore: run chaoskube with limited privileges

linki · Sep 19, 2018 · c0bc229 · c0bc229
1 parent 1ea316a
commit c0bc229
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/examples/chaoskube.yaml b/examples/chaoskube.yaml
@@ -40,6 +40,12 @@ spec:
         - --minimum-age=1h
         # terminate pods for real: this disables dry-run mode which is on by default
         - --no-dry-run
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 65534
+          readOnlyRootFilesystem: true
+          capabilities:
+            drop: ["ALL"]
 
 ---