Harden namespace test Job security context to resolve Code Scanning alert #107

[Copilot]

This PR addresses a code scanning finding in the Kubernetes test manifest under tilt_modules/namespace/test. The alert identified missing container/pod security context hardening in the Job spec.

• Scope

  • Updated tilt_modules/namespace/test/job-default-namespace.yaml only.
  • No behavioral or structural refactor outside the flagged manifest.

• Security hardening applied

  • Added pod-level securityContext.runAsNonRoot: true.
  • Added container-level securityContext.allowPrivilegeEscalation: false.

• Result

  • Closes the flagged ContainerSecurityContext gap with a minimal, targeted IaC change.

spec:
  template:
    spec:
      securityContext:
        runAsNonRoot: true
      containers:
        - name: namespace-test-verify
          securityContext:
            allowPrivilegeEscalation: false