updated pod security

Author: paavan98pm

04-path-security-and-networking/401-configmaps-and-secrets/templates/pod-secretsmanager.yaml

@@ -2,10 +2,18 @@ apiVersion: v1
 kind: Pod
 metadata:
   name: pod-secretsmanager
+  annotations:
+    seccomp.security.alpha.kubernetes.io/pod: docker/default
+    apparmor.security.beta.kubernetes.io/pod: runtime/default
 spec:
+  securityContext:
+    runAsUser:    1337
+    runAsNonRoot: true
   containers:
   - name: pod-secretsmanager
     image: paavanmistry/node-aws-sm-demo:latest
+    securityContext:
+      allowPrivilegeEscalation: false
     env:
       - name: ENDPOINT
         value: "https://secretsmanager.us-west-2.amazonaws.com"