From 10c2329d3208d0da00cac0479d4b70f8d597d7e2 Mon Sep 17 00:00:00 2001
From: Leonardo Cecchi <leonardo.cecchi@enterprisedb.com>
Date: Fri, 21 Mar 2025 16:10:30 +0100
Subject: [PATCH] chore: refresh manifest.yaml

Signed-off-by: Leonardo Cecchi <leonardo.cecchi@enterprisedb.com>
---
 manifest.yaml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/manifest.yaml b/manifest.yaml
index a05623a..10e8021 100644
--- a/manifest.yaml
+++ b/manifest.yaml
@@ -871,11 +871,25 @@ spec:
           tcpSocket:
             port: 9090
         resources: {}
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsGroup: 10001
+          runAsUser: 10001
+          seccompProfile:
+            type: RuntimeDefault
         volumeMounts:
         - mountPath: /server
           name: server
         - mountPath: /client
           name: client
+      securityContext:
+        runAsNonRoot: true
+        seccompProfile:
+          type: RuntimeDefault
       serviceAccountName: plugin-barman-cloud
       volumes:
       - name: server