Skip to content
Open
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions charts/fleet/templates/deployment.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -448,7 +448,11 @@ spec:
capabilities:
drop: [ALL]
privileged: false
{{- if .Values.fleet.securityContext.readOnlyRootFilesystem }}
readOnlyRootFilesystem: {{ .Values.fleet.securityContext.readOnlyRootFilesystem }}
{{ else }}
readOnlyRootFilesystem: true
{{- end }}
{{- if .Values.fleet.securityContext.runAsGroup }}
runAsGroup: {{ int64 .Values.fleet.securityContext.runAsGroup }}
{{- end }}
Expand Down
1 change: 1 addition & 0 deletions charts/fleet/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -127,6 +127,7 @@ fleet:
extraVolumeMounts: []
# Currently only passes runAsNonRoot, runAsUser, runAsGroup
securityContext:
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 3333
runAsGroup: 3333
Expand Down
Loading