Files
2026-07-13 13:12:00 +08:00

19 lines
388 B
YAML

apiVersion: apps/v1
kind: StatefulSet
metadata:
name: postgres
spec:
template:
spec:
securityContext:
runAsNonRoot: true
containers:
- name: postgres
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault