Make root

2026-09-17 18:22:54 +02:00 · 2025-02-26 15:36:02 +01:00
parent a3191684f1
commit a4d9c41966
1 changed files with 12 additions and 6 deletions
@@ -72,13 +72,19 @@ spec:
          ##
          annotations: {}
        allowEmptyPassword: true
-        podSecurityContext:
+        containerSecurityContext:
          enabled: true
-          fsGroupChangePolicy: Always
-          sysctls: []
-          supplementalGroups:
-          - 6
-          fsGroup: 1001
+          seLinuxOptions: {}
+          runAsUser: 0
+          runAsGroup: 0
+          runAsNonRoot: false
+          privileged: false
+          readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop: ["ALL"]
+          seccompProfile:
+            type: "RuntimeDefault

  syncPolicy:
    syncOptions: