From ddc05e4733560128721fe6633783956f43291324 Mon Sep 17 00:00:00 2001 From: Joseph Hanson Date: Wed, 7 Aug 2024 11:46:57 -0500 Subject: [PATCH] nonroot --- .../apps/qbittorrent/qbittorrent/app/helmrelease.yaml | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml b/kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml index 5ec44e2..c8684b3 100644 --- a/kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml +++ b/kubernetes/apps/qbittorrent/qbittorrent/app/helmrelease.yaml @@ -82,7 +82,9 @@ spec: - secretRef: name: qbittorrent-secret securityContext: + runAsUser: 568 runAsGroup: 568 + runAsNonRoot: true allowPrivilegeEscalation: false capabilities: add: @@ -165,9 +167,3 @@ spec: qbittorrent: gluetun: - path: /dev/net - unbound: - type: emptyDir - advancedMounts: - qbittorrent: - gluetun: - - path: /etc/unbound