mirror of
https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk.git
synced 2025-12-08 00:11:38 +01:00
42 lines
1.1 KiB
YAML
42 lines
1.1 KiB
YAML
# SPDX-FileCopyrightText: 2023 Bundesministerium des Innern und für Heimat, PG ZenDiS "Projektgruppe für Aufbau ZenDiS"
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
---
|
|
udmRestApi:
|
|
# TODO: Stub value currently
|
|
caCert: ""
|
|
|
|
extraVolumes:
|
|
- name: "attribute-to-group-mapper-hook"
|
|
configMap:
|
|
name: "ums-stack-data-swp-attribute-to-group-mapper-hook"
|
|
|
|
extraVolumeMounts:
|
|
- name: "attribute-to-group-mapper-hook"
|
|
mountPath: "/usr/lib/python3/dist-packages/univention/admin/hooks.d/AttributeToGroupMapper.py"
|
|
subPath: "AttributeToGroupMapper.py"
|
|
- name: "attribute-to-group-mapper-hook"
|
|
mountPath: "/usr/share/attribute-to-group-mapper/flag_to_group_mapping.json"
|
|
subPath: "flag_to_group_mapping.json"
|
|
|
|
securityContext:
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- "ALL"
|
|
add:
|
|
- "CHOWN"
|
|
- "DAC_OVERRIDE"
|
|
- "FOWNER"
|
|
- "FSETID"
|
|
- "KILL"
|
|
- "SETGID"
|
|
- "SETUID"
|
|
- "SETPCAP"
|
|
- "NET_BIND_SERVICE"
|
|
- "NET_RAW"
|
|
- "SYS_CHROOT"
|
|
privileged: false
|
|
seccompProfile:
|
|
type: "RuntimeDefault"
|
|
...
|