tiennm99/DocsGPT
1
0 Fork 0
mirror of https://github.com/tiennm99/DocsGPT.git synced 2026-10-15 12:13:38 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: more artefact hardening

Browse Source
This commit is contained in:
Alex committed 2026-07-04 11:42:27 +02:00
1 parent 47cc0314af
commit 94a845aa82
37 files changed
+1233 -165
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

deployment/k8s/deployments/sandbox-deploy.yaml
+4
View File
@@ -34,6 +34,10 @@ spec:
# runtimeClassName: gvisor
securityContext:
runAsNonRoot: true
# Numeric UID the kubelet can verify as non-root; MUST match the sandbox
# image's `USER` (deployment/sandbox/Dockerfile). Without it the pod
# fails to start with CreateContainerConfigError.
runAsUser: 10001
seccompProfile:
type: RuntimeDefault
containers: