Skip to content

Commit

Permalink
fix(opendj): non root user permission (#554)
Browse files Browse the repository at this point in the history
* docs: customization

* docs: add lifecycle to all services

* docs: indentation per service

* helm chart - add only needed config

* fixes and adding more configurations

* add missing bracket

* fix(opendj): non root user permission

* fix: user root can't be exploited from within the container
  • Loading branch information
misba7 authored Jun 12, 2023
1 parent ff30eb2 commit dcbaab3
Showing 1 changed file with 4 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -64,12 +64,15 @@ spec:
{{- toYaml . | nindent 8 }}
{{- end }}
{{- end }}
securityContext:
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
containers:
- name: {{ include "opendj.name" $ }}
lifecycle:
{{- toYaml .Values.lifecycle | nindent 10 }}
securityContext:
runAsUser: 1000
runAsNonRoot: true
imagePullPolicy: {{ $.Values.image.pullPolicy }}
image: "{{ $.Values.image.repository }}:{{ $.Values.image.tag }}"
Expand Down

0 comments on commit dcbaab3

Please sign in to comment.