podSecurityContext: fsGroup: 2000 securityContext: capabilities: drop: - ALL readOnlyRootFilesystem: true runAsNonRoot: false runAsUser: 1000 resources: limits: cpu: 4000m memory: 2048Mi rbac: buildNamespaces: - drone-runner extraSecretNamesForEnvFrom: - drone-env env: DRONE_RPC_HOST: drone.drone.svc.cluster.local DRONE_SECRET_PLUGIN_ENDPOINT: http://drone-secrets-drone-kubernetes-secrets.drone-runner.svc.cluster.local:3000 DRONE_NAMESPACE_DEFAULT: drone-runner DRONE_DEBUG: "true" DRONE_TRACE: "true" HTTP_PROXY: http://proxy-squid.proxy.svc.cluster.local:80 HTTPS_PROXY: http://proxy-squid.proxy.svc.cluster.local:80 NO_PROXY: localhost,.cluster.local,drone,drone.drone.svc.cluster.local,10.0.0.0/8,10.42.0.1,10.43.0.1