adjust security settings

kustomization.yaml

@@ -1,5 +1,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
+# Uncomment if storing configuration in the repo
+# - configmap.yaml
   - ./thelounge
   - ./znc

thelounge/statefulset.yaml

@@ -14,10 +14,15 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: thelounge
+        app.kubernetes.io/instance: thelounge
     spec:
+      priorityClassName: low-priority
       containers:
       - name: thelounge
         image: ghcr.io/thelounge/thelounge:latest
+        securityContext:
+          allowPrivilegeEscalation: false
+          runAsNonRoot: true
         ports:
         - containerPort: 9000
           name: http-9000

znc/statefulset.yaml

@@ -15,9 +15,13 @@ spec:
       labels:
         app.kubernetes.io/name: znc
     spec:
+      priorityClassName: low-priority
       containers:
       - name: znc
-        image: lscr.io/linuxserver/znc:latest
+        image: lscr.io/linuxserver/znc:latest    
+        securityContext:
+          allowPrivilegeEscalation: false
+          runAsNonRoot: true
         ports:
         - containerPort: 6501
           name: irc-6501