From 8be670e07a9b09328f8437ce1e6a866cc77147d6 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 9 Jul 2026 02:18:49 +0000
Subject: [PATCH 1/2] Initial plan


From 76e9157619e221b24623c4a784cc635515c46370 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 9 Jul 2026 02:20:56 +0000
Subject: [PATCH 2/2] fix: add security context to namespace test job manifest

---
 tilt_modules/namespace/test/job-default-namespace.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/tilt_modules/namespace/test/job-default-namespace.yaml b/tilt_modules/namespace/test/job-default-namespace.yaml
index 45d587a192..8efb05ad23 100644
--- a/tilt_modules/namespace/test/job-default-namespace.yaml
+++ b/tilt_modules/namespace/test/job-default-namespace.yaml
@@ -6,8 +6,12 @@ spec:
   backoffLimit: 1
   template:
     spec:
+      securityContext:
+        runAsNonRoot: true
       containers:
       - name: namespace-test-verify
         image: curlimages/curl
+        securityContext:
+          allowPrivilegeEscalation: false
         command: ["curl",  "-fsSL", "http://namespace-test-busybox:8000/"]
       restartPolicy: Never
\ No newline at end of file