Fix non-root deployment

Datavirke · Aug 31, 2024 · 639c80f · 639c80f
1 parent b62e72d
commit 639c80f
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/deploy/deployment.yaml b/deploy/deployment.yaml
@@ -15,6 +15,10 @@ spec:
       labels:
         app.kubernetes.io/name: datavirke
     spec:
+      securityContext:
+        runAsUser: 1252
+        runAsGroup: 1252
+        fsGroup: 1252
       containers:
         - name: web
           image: registry.kronform.pius.dev/datavirke.dk/datavirke.dk:main
@@ -26,7 +30,7 @@ spec:
             allowPrivilegeEscalation: false
             capabilities:
               drop: ["ALL"]
-            runAsNonRoot: false
+            runAsNonRoot: true
             seccompProfile:
               type: RuntimeDefault
 ---