Set a restricted security context on the operator
Issue: [ch11799]
@@ -13,4 +13,8 @@ spec:
env:
- name: CRUNCHY_DEBUG
value: "true"
- serviceAccount: postgres-operator
+ securityContext:
+ allowPrivilegeEscalation: false
+ readOnlyRootFilesystem: true
+ runAsNonRoot: true
+ serviceAccountName: postgres-operator
