Merge pull request #371 from DFE-Digital/maint-page-template-security…

…-update security improvements for maintenance template
DFE-Digital · Feb 10, 2025 · 5ec0f4b · 5ec0f4b
2 parents 3d08c65 + 5c50c27
commit 5ec0f4b
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/templates/new_service/maintenance_page/manifests/maintenance/deployment_maintenance.yml.tmpl b/templates/new_service/maintenance_page/manifests/maintenance/deployment_maintenance.yml.tmpl
@@ -20,6 +20,9 @@ spec:
       containers:
       - name: #SERVICE_NAME#-maintenance
         image: #DOCKER_REPOSITORY#-maintenance:#MAINTENANCE_IMAGE_TAG#
+        securityContext:
+          allowPrivilegeEscalation: false
+          runAsNonRoot: true
         ports:
         - containerPort: 8080
         resources: