diff --git a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/sso/dex/dex-deploy.yaml b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/sso/dex/dex-deploy.yaml index 640f9f06e..cc50cafa6 100644 --- a/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/sso/dex/dex-deploy.yaml +++ b/apps/pipeline/upstream/third-party/argo/upstream/manifests/quick-start/sso/dex/dex-deploy.yaml @@ -26,17 +26,6 @@ spec: ports: - name: http containerPort: 5556 - securityContext: - allowPrivilegeEscalation: false - seccompProfile: - type: RuntimeDefault - runAsNonRoot: true - capabilities: - drop: - - ALL - volumeMounts: - - mountPath: /data - name: config volumes: - name: config configMap: diff --git a/common/dex/base/deployment.yaml b/common/dex/base/deployment.yaml index bf4de2baa..fe14cd9e8 100644 --- a/common/dex/base/deployment.yaml +++ b/common/dex/base/deployment.yaml @@ -22,6 +22,14 @@ spec: ports: - name: http containerPort: 5556 + securityContext: + allowPrivilegeEscalation: false + seccompProfile: + type: RuntimeDefault + runAsNonRoot: true + capabilities: + drop: + - ALL volumeMounts: - name: config mountPath: /etc/dex/cfg