set allowPrivilegeEscalation for deployment templates (#1328)

* set allowPrivilegeEscalation for deployment templates * securityContext of container, not pod * aligning * default service account for pooler
2026-10-01 09:43:56 +02:00 · 2021-01-25 18:23:29 +01:00
parent 5ecb7b42e0
commit ac2a00c45e
6 changed files with 27 additions and 10 deletions
@@ -32,6 +32,7 @@ spec:
          runAsUser: 1000
          runAsNonRoot: true
          readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
        env:
        # provided additional ENV vars can overwrite individual config map entries
        - name: CONFIG_MAP_NAME