github.com/argoproj/argo-cd/v3@v3.2.1/manifests/ha/base/redis-ha/overlays/statefulset-containers-securityContext.yaml (about)

     1  - op: add
     2    path: /spec/template/spec/initContainers/0/securityContext
     3    value:
     4      readOnlyRootFilesystem: true
     5      allowPrivilegeEscalation: false
     6      capabilities:
     7        drop:
     8        - ALL
     9      seccompProfile:
    10        type: RuntimeDefault
    11  - op: add
    12    path: /spec/template/spec/containers/0/securityContext
    13    value:
    14      readOnlyRootFilesystem: true
    15      allowPrivilegeEscalation: false
    16      capabilities:
    17        drop:
    18        - ALL
    19      seccompProfile:
    20        type: RuntimeDefault
    21  - op: add
    22    path: /spec/template/spec/containers/1/securityContext
    23    value:
    24      readOnlyRootFilesystem: true
    25      allowPrivilegeEscalation: false
    26      capabilities:
    27        drop:
    28        - ALL
    29      seccompProfile:
    30        type: RuntimeDefault
    31  - op: add
    32    path: /spec/template/spec/containers/2/securityContext
    33    value:
    34      readOnlyRootFilesystem: true
    35      allowPrivilegeEscalation: false
    36      capabilities:
    37        drop:
    38        - ALL
    39      seccompProfile:
    40        type: RuntimeDefault