mirror of
https://github.com/nold360/hive-apps
synced 2025-01-30 03:12:50 +00:00
21 lines
334 B
YAML
21 lines
334 B
YAML
podSecurityContext:
|
|
fsGroup: 2000
|
|
|
|
securityContext:
|
|
capabilities:
|
|
drop:
|
|
- ALL
|
|
readOnlyRootFilesystem: true
|
|
runAsNonRoot: true
|
|
runAsUser: 1000
|
|
|
|
extraSecretNamesForEnvFrom:
|
|
- drone-secrets-env
|
|
|
|
rbac:
|
|
secretNamespace: drone-runner
|
|
restrictToSecrets:
|
|
- drone-secrets
|
|
|
|
env:
|
|
KUBERNETES_NAMESPACE: drone-runner
|