SeanOMik
/
k3s-cluster
1
0
Fork 0
Code Issues 2 Pull Requests 33 Packages Projects Releases Wiki Activity

add pod security context's to some pods in default ns

This commit is contained in:
SeanOMik 2023-06-01 22:54:02 -04:00
parent 61e542f8f9
commit 051e833431
2 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
cluster/apps/default/fireflyiii/helm-release.yaml
View File

@ -57,6 +57,13 @@ spec:
size: 8Gi size: 8Gi
mountPath: /var/www/html/storage/upload mountPath: /var/www/html/storage/upload
podSecurityContext:
runAsNonRoot: true
runAsUser: 10000
runAsGroup: 10000
fsGroup: 10000
fsGroupChangePolicy: OnRootMismatch
# resources: # resources:
# requests: # requests:
# cpu: 1m # cpu: 1m

7
cluster/apps/default/msrewards/helm-release.yaml
View File

@ -26,3 +26,10 @@ spec:
service: service:
main: main:
enabled: false enabled: false
podSecurityContext:
runAsNonRoot: true
runAsUser: 10000
runAsGroup: 10000
fsGroup: 10000
fsGroupChangePolicy: OnRootMismatch