(test) remediate medium vulnerabilities

colton-gabertan · Feb 25, 2025 · b47bc90 · b47bc90 · colton-gabertan · Feb 25, 2025
1 parent 8988eb7
commit b47bc90
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/apps/nginx-tutorial/nginx.yml b/apps/nginx-tutorial/nginx.yml
@@ -22,6 +22,14 @@ spec:
       containers:
         - name: nginx
           image: nginx:alpine
+          securityContext:
+            runAsNonRoot: true
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+              add:
+                - NET_BIND_SERVICE
           ports:
             - containerPort: 80
 ---