cluster

commit 2ec74b3ae193cb48ff3f8ae53ab7bd0677c01d66
parent bfab3e3582c2144b7ab51d2c3b2cfde840e1892b
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sun, 13 Apr 2025 14:31:19 +0200

Switch to solanum + atheme

Diffstat:
M
apps/base/irc/resources.yaml
 | 
6
++++++

1 file changed, 6 insertions(+), 0 deletions(-)
diff --git a/apps/base/irc/resources.yaml b/apps/base/irc/resources.yaml
@@ -18,6 +18,10 @@ metadata:
     labels:
         app: atheme
 spec:
+    securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
     replicas: 1
     strategy:
         type: RollingUpdate
@@ -48,6 +52,8 @@ spec:
                       readOnly: true
                     - mountPath: /atheme/etc
                       name: atheme-pvc
+                  securityContext:
+                    allowPrivilegeEscalation: false
             volumes:
                 - name: atheme-secrets
                   secret: