From 8fa4fd117532baebb82a3dbe2577d26e314c4775 Mon Sep 17 00:00:00 2001 From: Sheogorath <sheogorath@shivering-isles.com> Date: Sun, 17 Dec 2023 19:08:39 +0100 Subject: [PATCH] feat(jellyfin): Move to non-root user for execution --- apps/k8s01/jellyfin/deployment.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/apps/k8s01/jellyfin/deployment.yaml b/apps/k8s01/jellyfin/deployment.yaml index fd89f5be9..9639d199f 100644 --- a/apps/k8s01/jellyfin/deployment.yaml +++ b/apps/k8s01/jellyfin/deployment.yaml @@ -71,6 +71,10 @@ spec: allowPrivilegeEscalation: false restartPolicy: Always securityContext: + runAsNonRoot: true + runAsUser: 1000 + runAsGroup: 1000 + fsGroup: 1000 seccompProfile: type: "RuntimeDefault" volumes: -- GitLab