simon/kube
1
0
Fork 0
forked from k-space/kube
Code Pull Requests Activity

whoami: Drop privileges

Browse Source
This commit is contained in:
Lauri Võsandi 2024-08-25 00:21:24 +03:00
parent a71bd5de37
commit d8402bdec5
1 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
whoami/application.yml
View File

@ -14,6 +14,9 @@ spec:
labels: labels:
app: whoami app: whoami
spec: spec:
securityContext:
runAsUser: 65534
runAsGroup: 65534
containers: containers:
- name: whoami - name: whoami
image: traefik/whoami image: traefik/whoami
@ -24,6 +27,8 @@ spec:
requests: requests:
cpu: 1m cpu: 1m
memory: 2Mi memory: 2Mi
securityContext:
readOnlyRootFilesystem: true
ports: ports:
- containerPort: 80 - containerPort: 80
protocol: TCP protocol: TCP