bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(hermes): run triage gateway as nonroot

Browse Source
This commit is contained in:
jenkins 2026-08-08 19:01:14 -03:00
parent c7075c0172
commit 753de55c94
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
services/hermes/deployment.yaml
View File

@ -292,6 +292,15 @@ spec:
# TODO: migrate to Vault alongside the Gitea token; this manual # TODO: migrate to Vault alongside the Gitea token; this manual
# Secret was created in the interest of demo time. # Secret was created in the interest of demo time.
securityContext:
allowPrivilegeEscalation: false
runAsNonRoot: true
runAsUser: 10000
runAsGroup: 10000
capabilities:
drop: [ALL]
seccompProfile:
type: RuntimeDefault
volumeMounts: volumeMounts:
- name: home - name: home
mountPath: /opt/data mountPath: /opt/data