mirror of
https://github.com/suitenumerique/meet.git
synced 2026-08-10 18:57:06 +00:00
fheslouin
264f267ac3
This commit aim at adding a securityContext for pod and container in Deployment and Job, it include livekit pods as well It adds 2 values : - podSecurityContext : for pods - securityContext : for containers Please note that `celeryBackend` Deployment does not have any values defined in `values.meet.yaml` at the moment.
39 lines
851 B
Go Template
39 lines
851 B
Go Template
.podSecurityContext: &podSecurityContext
|
|
runAsUser: 1000
|
|
runAsGroup: 1000
|
|
fsGroup: 1000
|
|
fsGroupChangePolicy: "OnRootMismatch"
|
|
runAsNonRoot: true
|
|
seccompProfile:
|
|
type: RuntimeDefault
|
|
|
|
.securityContext: &securityContext
|
|
allowPrivilegeEscalation: false
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
|
|
frontend:
|
|
podSecurityContext: *podSecurityContext
|
|
securityContext: *securityContext
|
|
|
|
backend:
|
|
podSecurityContext: *podSecurityContext
|
|
securityContext: *securityContext
|
|
|
|
summary:
|
|
podSecurityContext: *podSecurityContext
|
|
securityContext: *securityContext
|
|
|
|
celeryTranscribe:
|
|
podSecurityContext: *podSecurityContext
|
|
securityContext: *securityContext
|
|
|
|
celerySummarize:
|
|
podSecurityContext: *podSecurityContext
|
|
securityContext: *securityContext
|
|
|
|
agents:
|
|
podSecurityContext: *podSecurityContext
|
|
securityContext: *securityContext
|