Skip to content

Commit 8fa2432

Browse files
committed
chore: edit init container security context for keycloak
1 parent 7e1de2b commit 8fa2432

1 file changed

Lines changed: 4 additions & 2 deletions

File tree

helm-chart/renku/values.yaml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -338,9 +338,11 @@ keycloakx:
338338
- ALL
339339
- name: init-certificates
340340
securityContext:
341+
runAsNonRoot: true
341342
allowPrivilegeEscalation: false
342-
runAsGroup: 65534
343-
runAsUser: 65534
343+
capabilities:
344+
drop:
345+
- ALL
344346
image: "registry.access.redhat.com/ubi8/ubi:8.4"
345347
command: ["sh", "-c"]
346348
args: ["mkdir -p /etc/pki/ca-trust/extracted/openssl/ /etc/pki/ca-trust/extracted/pem/ /etc/pki/ca-trust/extracted/java/ /etc/pki/ca-trust/extracted/edk2 && update-ca-trust"]

0 commit comments

Comments
 (0)