diff --git a/charts/promenade/templates/deployment-api.yaml b/charts/promenade/templates/deployment-api.yaml index 2b98576e..c67bf3d9 100644 --- a/charts/promenade/templates/deployment-api.yaml +++ b/charts/promenade/templates/deployment-api.yaml @@ -52,6 +52,7 @@ spec: terminationGracePeriodSeconds: {{ .Values.pod.lifecycle.termination_grace_period.api.timeout | default "30" }} initContainers: - name: promenade-util +{{ dict "envAll" $envAll "application" "promenade" "container" "promenade_util" | include "helm-toolkit.snippets.kubernetes_container_security_context" | indent 8 }} command: {{- if $mounts_promenade_api.volumeMounts }} - "cp" diff --git a/charts/promenade/values.yaml b/charts/promenade/values.yaml index 6b0d3818..d82692f7 100644 --- a/charts/promenade/values.yaml +++ b/charts/promenade/values.yaml @@ -179,6 +179,9 @@ pod: pod: runAsUser: 65534 container: + promenade_util: + readOnlyRootFilesystem: true + allowPrivilegeEscalation: false promenade_api: readOnlyRootFilesystem: true allowPrivilegeEscalation: false