diff --git a/services/ai-navigator-app/0.1.0/ai-navigator-app.yaml b/services/ai-navigator-app/0.1.0/ai-navigator-app.yaml index 77ad7856e..1b0c2d8d3 100644 --- a/services/ai-navigator-app/0.1.0/ai-navigator-app.yaml +++ b/services/ai-navigator-app/0.1.0/ai-navigator-app.yaml @@ -81,6 +81,15 @@ spec: initialDelaySeconds: 60 timeoutSeconds: 30 failureThreshold: 10 + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + readOnlyRootFilesystem: true + runAsNonRoot: true + seccompProfile: + type: RuntimeDefault --- apiVersion: v1 kind: Service