feat(infrastructure): rootless container

This commit is contained in:
2025-10-05 21:08:23 +02:00
parent 7b9d72791f
commit fc1b614f19
2 changed files with 0 additions and 10 deletions

View File

@@ -13,11 +13,6 @@ spec:
labels: labels:
app: {{ .Values.app.name }} app: {{ .Values.app.name }}
spec: spec:
securityContext:
runAsNonRoot: true
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
containers: containers:
- name: {{ .Values.app.name }} - name: {{ .Values.app.name }}
image: "{{- if .Values.image.digest -}}{{ .Values.image.repository }}@{{ .Values.image.digest }}{{- else -}}{{ .Values.image.repository }}:{{ default "latest" .Values.image.tag }}{{- end -}}" image: "{{- if .Values.image.digest -}}{{ .Values.image.repository }}@{{ .Values.image.digest }}{{- else -}}{{ .Values.image.repository }}:{{ default "latest" .Values.image.tag }}{{- end -}}"

View File

@@ -13,11 +13,6 @@ spec:
labels: labels:
app: {{ printf "%s-worker" .Values.app.name }} app: {{ printf "%s-worker" .Values.app.name }}
spec: spec:
securityContext:
runAsNonRoot: true
runAsUser: 1000
seccompProfile:
type: RuntimeDefault
containers: containers:
- name: {{ printf "%s-worker" .Values.app.name }} - name: {{ printf "%s-worker" .Values.app.name }}
image: "{{- if .Values.image.digest -}}{{ .Values.image.repository }}@{{ .Values.image.digest }}{{- else -}}{{ .Values.image.repository }}:{{ default "latest" .Values.image.tag }}{{- end -}}" image: "{{- if .Values.image.digest -}}{{ .Values.image.repository }}@{{ .Values.image.digest }}{{- else -}}{{ .Values.image.repository }}:{{ default "latest" .Values.image.tag }}{{- end -}}"