diff options
| -rw-r--r-- | cmd/sapientwindex/manifest.yaml | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/cmd/sapientwindex/manifest.yaml b/cmd/sapientwindex/manifest.yaml index b5cc412..829a98b 100644 --- a/cmd/sapientwindex/manifest.yaml +++ b/cmd/sapientwindex/manifest.yaml @@ -21,6 +21,23 @@ spec: - name: bot image: ghcr.io/xe/x/sapientwindex:latest imagePullPolicy: "Always" + resources: + limits: + cpu: "500m" + memory: "512Mi" + requests: + cpu: "100m" + memory: "256Mi" + securityContext: + runAsUser: 1000 + runAsGroup: 1000 + runAsNonRoot: true + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + seccompProfile: + type: RuntimeDefault env: - name: REDDIT_USERNAME valueFrom: |