From 08362fca3ca4bb8864c3e7573865061c1181bfcf Mon Sep 17 00:00:00 2001
From: nold <nold@gnu.one>
Date: Tue, 13 Dec 2022 16:46:13 +0100
Subject: [PATCH] fix(deluge): securitycontext

---
 projects/downloader/values/deluge.yaml | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/projects/downloader/values/deluge.yaml b/projects/downloader/values/deluge.yaml
index cf975de1..c914b440 100644
--- a/projects/downloader/values/deluge.yaml
+++ b/projects/downloader/values/deluge.yaml
@@ -106,6 +106,14 @@ initContainers:
     volumeMounts:
     - name: config
       mountPath: /config
+    securityContext:
+      runAsNonRoot: true
+      privileged: false
+      readOnlyRootFilesystem: true
+      allowPrivilegeEscalation: false
+      capabilities:
+        drop:
+        - ALL
 
 additionalContainers:
   deluge-daemon:
@@ -117,3 +125,11 @@ additionalContainers:
       mountPath: /downloads
     - name: cache
       mountPath: /home/deluge/.cache
+    securityContext:
+      runAsNonRoot: true
+      privileged: false
+      readOnlyRootFilesystem: true
+      allowPrivilegeEscalation: false
+      capabilities:
+        drop:
+        - ALL