Remove privileged and make immutable

Now that #80 is merged, we can harden the deployment even more
planetlabs · Aug 11, 2020 · 0a7429a · 0a7429a
1 parent 0a4fdc3
commit 0a7429a
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/helm/draino/values.yaml b/helm/draino/values.yaml
@@ -46,3 +46,5 @@ securityContext:
   runAsGroup: 101
   runAsNonRoot: true
   runAsUser: 100
+  privileged: false
+  readOnlyRootFilesystem: true