fix: rootless keycloak

SocialGouv · Dec 5, 2023 · 03051bf · 03051bf
1 parent 228c648
commit 03051bf
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.kontinuous/values.yaml b/.kontinuous/values.yaml
@@ -183,6 +183,10 @@ keycloakx:
     - name: compile-realm
       image: hairyhenderson/gomplate:v3.10.0-alpine
       imagePullPolicy: IfNotPresent
+      securityContext:
+        allowPrivilegeEscalation: false
+        runAsNonRoot: true
+        runAsUser: 100
       volumeMounts:
       - name: keycloak-realm-tpl
         mountPath: "/realm-tpl/"
@@ -206,6 +210,10 @@ keycloakx:
     - name: fetch-keycloak-providers
       image: curlimages/curl
       imagePullPolicy: IfNotPresent
+      securityContext:
+        allowPrivilegeEscalation: false
+        runAsNonRoot: true
+        runAsUser: 405
       command:
         - sh
       args: