fuzz

Signed-off-by: Adrian Cole <[email protected]>

Author: codefromthecrypt

k8s/k8s-manifest-elastic.yml

@@ -56,6 +56,10 @@ spec:
             # So, ELSER's memory is in addition to the heap and other overhead.
             - name: ES_JAVA_OPTS
               value: "-Xms2g -Xmx2g"
+          securityContext:
+            capabilities:
+              add: ["CHOWN", "DAC_OVERRIDE", "SETGID", "SETUID"]
+              drop: ["ALL"]
           readinessProbe:
             exec:
               # Readiness probe adapted from the Docker healthcheck script.
@@ -138,6 +142,8 @@ spec:
               value: fhjskloppd678ehkdfdlliverpoolfcr
             - name: XPACK_ENCRYPTEDSAVEDOBJECTS_ENCRYPTIONKEY
               value: fhjskloppd678ehkdfdlliverpoolfcr
+            - name: SERVER_HOST
+              value: 0.0.0.0
             - name: SERVER_PUBLICBASEURL
               value: http://127.0.0.1:5601
           readinessProbe:
@@ -245,6 +251,16 @@ spec:
           ports:
             - containerPort: 4317
             - containerPort: 4318
+          readinessProbe:
+            tcpSocket:
+              port: 4317
+            initialDelaySeconds: 1
+            periodSeconds: 1
+            failureThreshold: 300
+          securityContext:
+            capabilities:
+              add: [ "CHOWN", "DAC_OVERRIDE", "SETGID", "SETUID" ]
+              drop: [ "ALL" ]
       volumes:
         - name: config
           configMap: