Merge branch 'fix/discovery-cron-podsecurity' into 'main'

fix(helm): add restricted PodSecurity settings to discovery CronJob

See merge request vikingowl/marktvogt.de!5

backend/deploy/helm/templates/discovery-cron.yaml

@@ -17,9 +17,19 @@ spec:
       template:
         spec:
           restartPolicy: OnFailure
+          securityContext:
+            runAsNonRoot: true
+            runAsUser: 100
+            runAsGroup: 100
+            seccompProfile:
+              type: RuntimeDefault
           containers:
             - name: tick
               image: curlimages/curl:8.9.1
+              securityContext:
+                allowPrivilegeEscalation: false
+                capabilities:
+                  drop: ["ALL"]
               command:
                 - sh
                 - -c