diff --git a/cluster/apps/default/fireflyiii/helm-release.yaml b/cluster/apps/default/fireflyiii/helm-release.yaml index c4ab2b2..cbf22c9 100644 --- a/cluster/apps/default/fireflyiii/helm-release.yaml +++ b/cluster/apps/default/fireflyiii/helm-release.yaml @@ -57,6 +57,13 @@ spec: size: 8Gi mountPath: /var/www/html/storage/upload + podSecurityContext: + runAsNonRoot: true + runAsUser: 10000 + runAsGroup: 10000 + fsGroup: 10000 + fsGroupChangePolicy: OnRootMismatch + # resources: # requests: # cpu: 1m diff --git a/cluster/apps/default/msrewards/helm-release.yaml b/cluster/apps/default/msrewards/helm-release.yaml index 7151c89..a0b4e18 100644 --- a/cluster/apps/default/msrewards/helm-release.yaml +++ b/cluster/apps/default/msrewards/helm-release.yaml @@ -25,4 +25,11 @@ spec: service: main: - enabled: false \ No newline at end of file + enabled: false + + podSecurityContext: + runAsNonRoot: true + runAsUser: 10000 + runAsGroup: 10000 + fsGroup: 10000 + fsGroupChangePolicy: OnRootMismatch \ No newline at end of file