sheppy/opendesk
1
0
Fork 0
mirror of https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk.git synced 2025-12-07 07:51:38 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix(nubus): Use read-only root filesystem for Keycloak bootstrap

Browse Source
This commit is contained in:
Timo Hollwedel
2025-04-25 15:42:22 +02:00
committed by Thorsten Roßner
parent 6d6b1a6dd7
commit 1edd7c3f06
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
helmfile/apps/nubus/values-nubus.yaml.gotmpl
View File

@@ -1766,7 +1766,7 @@ nubusKeycloakBootstrap:
capabilities: capabilities:
drop: drop:
- "ALL" - "ALL"
readOnlyRootFilesystem: false readOnlyRootFilesystem: true
runAsGroup: 1000 runAsGroup: 1000
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1000 runAsUser: 1000