diff options
| author | Paul Buetow <paul@buetow.org> | 2026-01-09 11:36:11 +0200 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-01-09 19:40:51 +0200 |
| commit | 8a109670240c6604767dbf0a3abb933661cbf600 (patch) | |
| tree | 4bd18128984eb11ae78e8d99c891594633c318db | |
| parent | a14bbf6775c1b62c996ea4b63d1fe1de3ddfc39f (diff) | |
Add SETGID and SETUID capabilities to cgit container
Nginx workers need these capabilities to drop privileges.
Add SETGID and SETUID to allow nginx workers to start properly.
| -rw-r--r-- | f3s/git-server/helm-chart/templates/deployment.yaml | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/f3s/git-server/helm-chart/templates/deployment.yaml b/f3s/git-server/helm-chart/templates/deployment.yaml index 7381178..b876e0f 100644 --- a/f3s/git-server/helm-chart/templates/deployment.yaml +++ b/f3s/git-server/helm-chart/templates/deployment.yaml @@ -95,6 +95,7 @@ spec: allowPrivilegeEscalation: false capabilities: drop: ["ALL"] + add: ["SETGID", "SETUID"] resources: requests: cpu: 50m |