diff options
| -rw-r--r-- | deployment.yaml | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/deployment.yaml b/deployment.yaml index 2c2a8c7..e7e3266 100644 --- a/deployment.yaml +++ b/deployment.yaml @@ -2,6 +2,7 @@ apiVersion: apps/v1 kind: Deployment metadata: name: metricity + namespace: bots spec: replicas: 1 selector: @@ -12,6 +13,10 @@ spec: labels: app: metricity spec: + securityContext: + fsGroup: 2000 + runAsUser: 1000 + runAsNonRoot: true containers: - name: metricity image: ghcr.io/python-discord/metricity:latest @@ -19,3 +24,5 @@ spec: envFrom: - secretRef: name: metricity-env + securityContext: + readOnlyRootFilesystem: true |