Run pgadmin4 as nonroot

2023-06-14 00:51:04 -04:00 · 2023-06-14 00:51:04 -04:00 · 561ed74f6f
commit 561ed74f6f
parent bcb19f7a0c
1 changed files with 7 additions and 1 deletions
--- a/cluster/apps/database/postgresql/pgadmin4/helm-release.yaml
+++ b/cluster/apps/database/postgresql/pgadmin4/helm-release.yaml
@ -29,4 +29,10 @@ spec:
      tls:
        - hosts:
            - *host
-          secretName: wildcard-main-tls
+          secretName: wildcard-main-tls
+
+    podSecurityContext:
+      runAsUser: 10000
+      runAsGroup: 10000
+      fsGroup: 100
+      fsGroupChangePolicy: "OnRootMismatch"