| commit | a2ee865a0cb74f88ba4b9861598e1efe78c4f066 | [log] [tgz] |
|---|---|---|
| author | Sergiusz Bazanski <q3k@hackerspace.pl> | Wed Jan 22 21:48:48 2020 +0100 |
| committer | Sergiusz Bazanski <q3k@hackerspace.pl> | Wed Jan 22 21:48:48 2020 +0100 |
| tree | 464b0c74924a10e285f82de4c21d0ff3198c9e94 | |
| parent | 083b176f74ae826ad98dc2d1064428468737ec2c [diff] |
postgres: run unprivilged Change-Id: I8d7e92093c0df91b6cd601a4d8e2484fca97ee88
diff --git a/kube/postgres.libsonnet b/kube/postgres.libsonnet index d82a89a..571fe7b 100644 --- a/kube/postgres.libsonnet +++ b/kube/postgres.libsonnet
@@ -67,6 +67,9 @@ }, }, }, + securityContext: { + runAsUser: 999, + }, }, }, },