feat(hydra-sql): non root user deployment

This commit is contained in:
cmsassot 2024-03-25 13:52:12 +01:00
parent 3e2aa22b8d
commit 85ec6f03c8
1 changed files with 8 additions and 0 deletions

View File

@ -36,6 +36,10 @@ spec:
initialDelaySeconds: 10 initialDelaySeconds: 10
periodSeconds: 30 periodSeconds: 30
resources: {} resources: {}
securityContext:
runAsNonRoot: true
runAsGroup: 1000
runAsUser: 1000
envFrom: envFrom:
- configMapRef: - configMapRef:
name: hydra-sql-env name: hydra-sql-env
@ -94,6 +98,10 @@ spec:
- name: CADDY_APP_ROOT_PUBLIC - name: CADDY_APP_ROOT_PUBLIC
value: "/app/public/" value: "/app/public/"
resources: {} resources: {}
securityContext:
runAsNonRoot: true
runAsGroup: 1000
runAsUser: 1000
ports: ports:
- containerPort: 8080 - containerPort: 8080
volumeMounts: volumeMounts: