diff options
| author | Paul Buetow <paul@buetow.org> | 2026-01-09 11:36:11 +0200 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-01-09 11:36:11 +0200 |
| commit | a2cde231a624704295524eb1372f51eef8ce955f (patch) | |
| tree | 2f4a7e3f1e3229d6887a4edf31672f96b4a19495 | |
| parent | 6c13b8a631cfaf01da5e2328dbc20a30d04cbb61 (diff) | |
Add SETGID and SETUID capabilities to cgit container
Nginx workers need these capabilities to drop privileges.
Add SETGID and SETUID to allow nginx workers to start properly.
| -rw-r--r-- | f3s/git-server/helm-chart/templates/deployment.yaml | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/f3s/git-server/helm-chart/templates/deployment.yaml b/f3s/git-server/helm-chart/templates/deployment.yaml index 7381178..b876e0f 100644 --- a/f3s/git-server/helm-chart/templates/deployment.yaml +++ b/f3s/git-server/helm-chart/templates/deployment.yaml @@ -95,6 +95,7 @@ spec: allowPrivilegeEscalation: false capabilities: drop: ["ALL"] + add: ["SETGID", "SETUID"] resources: requests: cpu: 50m |