forked from k-space/kube
whoami: Drop privileges
This commit is contained in:
parent
a71bd5de37
commit
d8402bdec5
@ -14,6 +14,9 @@ spec:
|
|||||||
labels:
|
labels:
|
||||||
app: whoami
|
app: whoami
|
||||||
spec:
|
spec:
|
||||||
|
securityContext:
|
||||||
|
runAsUser: 65534
|
||||||
|
runAsGroup: 65534
|
||||||
containers:
|
containers:
|
||||||
- name: whoami
|
- name: whoami
|
||||||
image: traefik/whoami
|
image: traefik/whoami
|
||||||
@ -24,6 +27,8 @@ spec:
|
|||||||
requests:
|
requests:
|
||||||
cpu: 1m
|
cpu: 1m
|
||||||
memory: 2Mi
|
memory: 2Mi
|
||||||
|
securityContext:
|
||||||
|
readOnlyRootFilesystem: true
|
||||||
ports:
|
ports:
|
||||||
- containerPort: 80
|
- containerPort: 80
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
|
Loading…
Reference in New Issue
Block a user