diff --git a/test/inject/testdata/injected_default.golden b/test/inject/testdata/injected_default.golden index f6721a87d..7138fb69e 100644 --- a/test/inject/testdata/injected_default.golden +++ b/test/inject/testdata/injected_default.golden @@ -83,6 +83,8 @@ spec: initialDelaySeconds: 2 resources: {} securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true runAsUser: 2102 terminationMessagePolicy: FallbackToLogsOnError initContainers: @@ -106,10 +108,12 @@ spec: cpu: 10m memory: 10Mi securityContext: + allowPrivilegeEscalation: false capabilities: add: - NET_ADMIN privileged: false + readOnlyRootFilesystem: true runAsNonRoot: false runAsUser: 0 terminationMessagePolicy: FallbackToLogsOnError diff --git a/test/inject/testdata/injected_params.golden b/test/inject/testdata/injected_params.golden index d40db5dd9..c1740f0af 100644 --- a/test/inject/testdata/injected_params.golden +++ b/test/inject/testdata/injected_params.golden @@ -106,6 +106,8 @@ spec: cpu: 10m memory: 10Mi securityContext: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true runAsUser: 1337 terminationMessagePolicy: FallbackToLogsOnError initContainers: @@ -131,10 +133,12 @@ spec: cpu: 10m memory: 10Mi securityContext: + allowPrivilegeEscalation: false capabilities: add: - NET_ADMIN privileged: false + readOnlyRootFilesystem: true runAsNonRoot: false runAsUser: 0 terminationMessagePolicy: FallbackToLogsOnError