Try to ensure we're always using the right user/group

sillsdev · May 16, 2024 · 1c568df · 1c568df
1 parent c9c16a2
commit 1c568df
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/deployment/base/hg-deployment.yaml b/deployment/base/hg-deployment.yaml
@@ -79,6 +79,9 @@ spec:
     spec:
       securityContext:
         fsGroup: 33
+        runAsUser: 33
+        runAsGroup: 33 # www-data
+        runAsNonRoot: true
       containers:
       - name: hgweb
         image: ghcr.io/sillsdev/lexbox-hgweb:latest
@@ -176,6 +179,7 @@ spec:
         securityContext:
           runAsUser: 33
           runAsGroup: 33 # www-data
+          runAsNonRoot: true
         image: busybox:1.36.1
         command:
           - 'sh'

diff --git a/deployment/init-repos/hg-deployment-patch.yaml b/deployment/init-repos/hg-deployment-patch.yaml
@@ -11,6 +11,7 @@ spec:
           securityContext:
             runAsUser: 33
             runAsGroup: 33 # www-data
+            runAsNonRoot: true
           image: busybox:1.36.1
           command:
             - 'sh'