security context

2025-10-11 20:44:25 +02:00
parent c2918c36bc
commit 576f5780a2
1 changed files with 7 additions and 0 deletions
--- a/gitea-runner/main.yaml
+++ b/gitea-runner/main.yaml
@@ -82,6 +82,13 @@ spec:
        image: docker.io/gitea/act_runner:0.2.11-dind-rootless
        imagePullPolicy: IfNotPresent
        name: act-runner
+        securityContext:
+          runAsUser: 1000
+          runAsGroup: 1000
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+              - ALL
        volumeMounts:
        - mountPath: /data
          name: data