small security improvements

[SchSeba]

• add runAsNonRoot=true
• add readOnlyRootFilesystem=true
• add allowPrivilegeEscalation=false

for operator network injector and operator webhook

[github-actions]

Thanks for your PR,
To run vendors CIs use one of:

• /test-all: To run all tests for all vendors.
• /test-e2e-all: To run all E2E tests for all vendors.
• /test-e2e-nvidia-all: To run all E2E tests for NVIDIA vendor.

To skip the vendors CIs use one of:

• /skip-all: To skip all tests for all vendors.
• /skip-e2e-all: To skip all E2E tests for all vendors.
• /skip-e2e-nvidia-all: To skip all E2E tests for NVIDIA vendor.
  Best regards.

[coveralls]

Pull Request Test Coverage Report for Build 8264574655

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• 5 unchanged lines in 2 files lost coverage.
• Overall coverage decreased (-0.04%) to 35.883%

---

Files with Coverage Reduction	New Missed Lines	%
controllers/sriovibnetwork_controller.go	2	68.94%
api/v1/helper.go	3	45.33%

Totals
Change from base Build 8234792093:	-0.04%
Covered Lines:	4429
Relevant Lines:	12343

---

💛 - Coveralls

[zeeke]

LGTM

[ykulazhenkov]

LGTM

[SchSeba]

/hold

checking why k8s is not able to deploy the pods

[github-actions]

Thanks for your PR,
To run vendors CIs use one of:

• /test-all: To run all tests for all vendors.
• /test-e2e-all: To run all E2E tests for all vendors.
• /test-e2e-nvidia-all: To run all E2E tests for NVIDIA vendor.

To skip the vendors CIs use one of:

• /skip-all: To skip all tests for all vendors.
• /skip-e2e-all: To skip all E2E tests for all vendors.
• /skip-e2e-nvidia-all: To skip all E2E tests for NVIDIA vendor.
  Best regards.

[SchSeba]

waiting for k8snetworkplumbingwg/network-resources-injector#150

[SchSeba]

/hold cancel