31 lines
703 B
YAML
31 lines
703 B
YAML
podSecurityContext:
|
|
runAsUser: 1000
|
|
runAsGroup: 3000
|
|
fsGroup: 2000
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
|
|
# This config will be rendered into the container's securityContext.
|
|
securityContext:
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
|
|
# Example override for the optional pluginsManager container securityContext
|
|
pluginsManager:
|
|
enabled: true
|
|
baseImage: "node:18-alpine"
|
|
version: "1.0.0"
|
|
securityContext:
|
|
runAsUser: 1001
|
|
runAsNonRoot: true
|
|
allowPrivilegeEscalation: false
|
|
readOnlyRootFilesystem: true
|
|
capabilities:
|
|
drop:
|
|
- ALL |