forked from k-space/kube
woodpecker-agent: Drop privileges
This commit is contained in:
parent
3dce3d07fd
commit
508c03268e
@ -68,11 +68,12 @@ spec:
|
|||||||
spec:
|
spec:
|
||||||
serviceAccountName: woodpecker-agent
|
serviceAccountName: woodpecker-agent
|
||||||
securityContext:
|
securityContext:
|
||||||
{}
|
runAsNonRoot: true
|
||||||
|
runAsUser: 1000
|
||||||
containers:
|
containers:
|
||||||
- name: agent
|
- name: agent
|
||||||
securityContext:
|
securityContext:
|
||||||
{}
|
readOnlyRootFilesystem: false
|
||||||
image: woodpeckerci/woodpecker-agent:next@sha256:703480d98991bb80ee86aa081a7a9db7d4346b9d5bdeaa3f92688d195cd36800
|
image: woodpeckerci/woodpecker-agent:next@sha256:703480d98991bb80ee86aa081a7a9db7d4346b9d5bdeaa3f92688d195cd36800
|
||||||
ports:
|
ports:
|
||||||
- name: http
|
- name: http
|
||||||
|
Loading…
Reference in New Issue
Block a user