diff options
| author | Paul Buetow <paul@buetow.org> | 2026-01-09 11:36:11 +0200 |
|---|---|---|
| committer | Paul Buetow <paul@buetow.org> | 2026-01-09 11:36:11 +0200 |
| commit | a2cde231a624704295524eb1372f51eef8ce955f (patch) | |
| tree | 2f4a7e3f1e3229d6887a4edf31672f96b4a19495 /f3s/git-server | |
| parent | 6c13b8a631cfaf01da5e2328dbc20a30d04cbb61 (diff) | |
Add SETGID and SETUID capabilities to cgit container
Nginx workers need these capabilities to drop privileges.
Add SETGID and SETUID to allow nginx workers to start properly.
Diffstat (limited to 'f3s/git-server')
| -rw-r--r-- | f3s/git-server/helm-chart/templates/deployment.yaml | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/f3s/git-server/helm-chart/templates/deployment.yaml b/f3s/git-server/helm-chart/templates/deployment.yaml index 7381178..b876e0f 100644 --- a/f3s/git-server/helm-chart/templates/deployment.yaml +++ b/f3s/git-server/helm-chart/templates/deployment.yaml @@ -95,6 +95,7 @@ spec: allowPrivilegeEscalation: false capabilities: drop: ["ALL"] + add: ["SETGID", "SETUID"] resources: requests: cpu: 50m |