Files
2026-07-13 13:12:00 +08:00

19 lines
387 B
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: omnigent
spec:
template:
spec:
securityContext:
runAsNonRoot: true
containers:
- name: omnigent
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault