Fix PSS concerns (#112)

* Update deployment.yaml * Update CHANGELOG.md * Update deployment.yaml * Update deployment.yaml
giantswarm · Dec 4, 2023 · 93f7284 · 93f7284
1 parent 4c1dbd2
commit 93f7284
Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -9,6 +9,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+
+- Address PSS concerns.
+
 ## [0.2.0] - 2023-11-10
 
 ### Changed

diff --git a/helm/prow-log-aggregator/templates/deployment.yaml b/helm/prow-log-aggregator/templates/deployment.yaml
@@ -25,5 +25,9 @@ spec:
             - daemon
             - --kubeconfig.namespace={{ .Values.kubeconfig.namespace }}
             - --server.listen.address=http://0.0.0.0:8000
+          securityContext:
+            allowPrivilegeEscalation: false
       securityContext:
         runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault