Use unprivileged alpine container

2022-02-14 10:05:52 +00:00
parent d0338f1895
commit c6397047b7
2 changed files with 5 additions and 8 deletions
--- a/kubernetes/base/deployment.yaml
+++ b/kubernetes/base/deployment.yaml
@@ -18,9 +18,10 @@ spec:

    spec:
      securityContext:
+        fsGroup: 101
+        runAsUser: 101
+        runAsGroup: 101
        runAsNonRoot: true
-        fsGroup: 1001
-        sysctls: []

      containers:
        - name: dsm-client
@@ -52,7 +53,3 @@ spec:
            failureThreshold: 3
            successThreshold: 1
            initialDelaySeconds: 5
-
-          securityContext:
-            runAsUser: 1001
-            runAsNonRoot: true