diff options
| author | Paul Buetow <paul@buetow.org> | 2026-02-03 23:09:28 +0200 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-02-03 23:09:28 +0200 |
| commit | c42f9d99da2930097f9da74e705948f6fd519219 (patch) | |
| tree | d3e441cd7ace823c01fbfe7009295303e4eb5b7e | |
| parent | d48a5d7d749f950203cad84c81c13bab9c144b69 (diff) | |
Update ipv6test to enforce non-root runtime.
Switch the container to an unprivileged UID/GID and update probes for port 8080.
| -rw-r--r-- | f3s/ipv6test/helm-chart/templates/deployment.yaml | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/f3s/ipv6test/helm-chart/templates/deployment.yaml b/f3s/ipv6test/helm-chart/templates/deployment.yaml index 723384d..48f3d6b 100644 --- a/f3s/ipv6test/helm-chart/templates/deployment.yaml +++ b/f3s/ipv6test/helm-chart/templates/deployment.yaml @@ -20,6 +20,9 @@ spec: - containerPort: 8080 securityContext: allowPrivilegeEscalation: false + runAsNonRoot: true + runAsUser: 1000 + runAsGroup: 1000 resources: requests: memory: "64Mi" @@ -30,12 +33,12 @@ spec: readinessProbe: httpGet: path: / - port: 80 + port: 8080 initialDelaySeconds: 5 periodSeconds: 10 livenessProbe: httpGet: path: / - port: 80 + port: 8080 initialDelaySeconds: 15 periodSeconds: 20 |