fixed nonroot

2020-02-01 18:01:21 +01:00 · 2020-02-01 18:01:21 +01:00 · b8f835eb3a
commit b8f835eb3a
parent c520dfc3b5
3 changed files with 10 additions and 4 deletions
--- a/config/deployment.yaml
+++ b/config/deployment.yaml
@ -21,11 +21,17 @@ spec:
      - name: template-solver
        image: git.giftfish.de/ston1th/template-solver
        imagePullPolicy: Always
+        securityContext:
+          runAsUser: 65532
+          runAsGroup: 65532
+          capabilities:
+            drop: ["ALL"]
        resources:
          requests:
            cpu: 100m
            memory: 128Mi
        args:
+        - --secure-port=8443
        - --tls-cert-file=/tls/tls.crt
        - --tls-private-key-file=/tls/tls.key
        env:
@ -33,7 +39,7 @@ spec:
          value: template-solver
        ports:
        - name: https
-          containerPort: 443
+          containerPort: 8443
          protocol: TCP
        livenessProbe:
          httpGet: