feat(hydra-sql): non root user deployment

2024-03-25 13:52:12 +01:00 · 2024-03-25 13:52:12 +01:00 · 85ec6f03c8
commit 85ec6f03c8
parent 3e2aa22b8d
1 changed files with 8 additions and 0 deletions
--- a/components/hydra-sql/resources/hydra-sql-deployment.yaml
+++ b/components/hydra-sql/resources/hydra-sql-deployment.yaml
@ -36,6 +36,10 @@ spec:
            initialDelaySeconds: 10
            periodSeconds: 30
          resources: {}
+          securityContext:
+            runAsNonRoot: true
+            runAsGroup: 1000
+            runAsUser: 1000
          envFrom:
            - configMapRef:
                name: hydra-sql-env
@ -94,6 +98,10 @@ spec:
            - name: CADDY_APP_ROOT_PUBLIC
              value: "/app/public/"
          resources: {}
+          securityContext:
+            runAsNonRoot: true
+            runAsGroup: 1000
+            runAsUser: 1000
          ports:
            - containerPort: 8080
          volumeMounts: