Security Improvements on the example yaml

[pjbgf]

Sprinkling some security goodness on the example yaml file to help users do the right thing.
This change will:

• Drop ALL capabilities
• Enable seccomp
• Disable privilege escalation

[pjbgf]

/assign @wongma7

[wongma7]

/lgtm
/approve
i assume allowPrivilegeEscalation: false is the default, but doesnt hurt to set it expliclty

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: pjbgf, wongma7

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [wongma7]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[pjbgf]

/lgtm
/approve

thank you!

i assume allowPrivilegeEscalation: false is the default, but doesnt hurt to set it expliclty

Actually, the default is actually true. 😅

Official docs: This defaults to allowed so as to not break setuid binaries...