woodpecker-agent: Drop privileges

2023-08-16 10:10:21 +03:00 · 2023-08-16 10:10:21 +03:00 · 508c03268e
parent 3dce3d07fd
commit 508c03268e
1 changed files with 3 additions and 2 deletions
--- a/woodpecker/woodpecker-agent.yml
+++ b/woodpecker/woodpecker-agent.yml
@ -68,11 +68,12 @@ spec:
    spec:
      serviceAccountName: woodpecker-agent
      securityContext:
-        {}
+        runAsNonRoot: true
+        runAsUser: 1000
      containers:
        - name: agent
          securityContext:
-            {}
+            readOnlyRootFilesystem: false
          image: woodpeckerci/woodpecker-agent:next@sha256:703480d98991bb80ee86aa081a7a9db7d4346b9d5bdeaa3f92688d195cd36800
          ports:
            - name: http