config

2024-10-23 08:06:46 +02:00
parent a080517b00
commit 850e4c4876
1 changed files with 1 additions and 6 deletions
--- a/argocd/apps/penpot/penpot.yaml
+++ b/argocd/apps/penpot/penpot.yaml
@@ -36,12 +36,7 @@ spec:
          value: 'true'
        - name: ingress.annotations.cert-manager\.io\/cluster-issuer
          value: lets-encrypt-staging
-        - name: backend.containerSecurityContext
-          value: 'false'
-#          allowPrivilegeEscalation: 'false'
-#          capabilities:
-#            drop:
-#              - ALL
+        - backend.containerSecurityContext: {"allowPrivilegeEscalation":false,"capabilities":{"drop":["all"]},"readOnlyRootFilesystem":false,"runAsNonRoot":true,"runAsUser":1001}
    chart: penpot
  destination:
    server: 'https://kubernetes.default.svc'