add kyverno policies

Signed-off-by: gwg313 <gwg313@pm.me>
2026-05-27 19:23:54 -04:00 · 2026-05-27 19:23:54 -04:00 · baa0216960
commit baa0216960
parent 4be877e419
35 changed files with 843 additions and 39 deletions
--- a/apps/audiobookshelf/deployment.yaml
+++ b/apps/audiobookshelf/deployment.yaml
@ -15,8 +15,16 @@ spec:
      labels:
        app: audiobookshelf
    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 1000
+        fsGroup: 1000
      containers:
        - name: audiobookshelf
+          securityContext:
+            allowPrivilegeEscalation: false
+            runAsNonRoot: true
+            runAsUser: 1000
          image: ghcr.io/advplyr/audiobookshelf:2.35.0
          imagePullPolicy: IfNotPresent
          ports: