add kyverno policies

Signed-off-by: gwg313 <gwg313@pm.me>
2026-05-27 19:23:54 -04:00 · 2026-05-27 19:23:54 -04:00 · baa0216960
commit baa0216960
parent 4be877e419
35 changed files with 843 additions and 39 deletions
--- a/apps/yopass/deployment.yaml
+++ b/apps/yopass/deployment.yaml
@ -12,8 +12,17 @@ spec:
      labels:
        app.kubernetes.io/name: yopass
    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 1000
+        fsGroup: 1000
      containers:
        - name: yopass
+          securityContext:
+            allowPrivilegeEscalation: false
+            runAsNonRoot: true
+            runAsUser: 1000
+            readOnlyRootFilesystem: false
          image: jhaals/yopass:13.1.0
          args:
            - "--memcached=localhost:11211"