Fix pod security (#204)

* Fix pod security * Extra security context * Use correct security context
2026-07-17 00:46:06 +00:00 · 2026-05-29 18:06:47 +00:00
parent 6612d0d02b
commit 1a4f1d94b6
2 changed files with 5 additions and 1 deletions
--- a/helm/taskchampion-sync-server/templates/deployment.yaml
+++ b/helm/taskchampion-sync-server/templates/deployment.yaml
@ -30,6 +30,8 @@ spec:
        - name: postgres-init
          image: "{{ .Values.postgres.initContainer.image }}"
          imagePullPolicy: {{ .Values.postgres.initContainer.imagePullPolicy }}
+          securityContext:
+            allowPrivilegeEscalation: false
          env:
            - name: PGURI
              valueFrom:
@ -86,6 +88,8 @@ spec:
          image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
          {{- end }}
          imagePullPolicy: {{ .Values.image.pullPolicy }}
+          securityContext:
+            allowPrivilegeEscalation: false
          env:
            {{- range $name, $value := .Values.env }}
            - name: {{ $name }}