feat(hydra-oidc): non root user deployment

2024-03-25 13:51:55 +01:00 · 2024-03-25 13:51:55 +01:00 · 3e2aa22b8d
parent faeb801d8f
commit 3e2aa22b8d
1 changed files with 8 additions and 0 deletions
--- a/components/hydra-oidc/resources/hydra-oidc-deployment.yaml
+++ b/components/hydra-oidc/resources/hydra-oidc-deployment.yaml
@ -46,6 +46,10 @@ spec:
            - configMapRef:
                name: hydra-oidc-env
          resources: {}
+          securityContext:
+            runAsNonRoot: true
+            runAsGroup: 1000
+            runAsUser: 1000

        - image: reg.cadoles.com/cmsassot/hydra-oidc-test:latest
          imagePullPolicy: Always
@ -90,4 +94,8 @@ spec:
            - name: CADDY_APP_ROOT_PUBLIC
              value: "/app/public/"
          resources: {}
+          securityContext:
+            runAsNonRoot: true
+            runAsGroup: 1000
+            runAsUser: 1000
      restartPolicy: Always