From f557b57275249923ffa4d77f6b68118206e69b29 Mon Sep 17 00:00:00 2001
From: Ruben Hensen <ruben.hensen@protonmail.com>
Date: Wed, 26 Feb 2025 14:40:26 +0100
Subject: [PATCH] Add root group

---
 apps/templates/mbgwp-helm.yaml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/apps/templates/mbgwp-helm.yaml b/apps/templates/mbgwp-helm.yaml
index 5d62680..fcbe8c6 100644
--- a/apps/templates/mbgwp-helm.yaml
+++ b/apps/templates/mbgwp-helm.yaml
@@ -72,6 +72,19 @@ spec:
           ##
           annotations: {}
         allowEmptyPassword: true
+        containerSecurityContext:
+          enabled: true
+          seLinuxOptions: {}
+          runAsUser: 1001
+          runAsGroup: 0
+          runAsNonRoot: true
+          privileged: false
+          readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop: ["ALL"]
+          seccompProfile:
+            type: "RuntimeDefault"
 
   syncPolicy:
     syncOptions: