application icon indicating copy to clipboard operation
application copied to clipboard

Enforce running containers as non-root user by default

Open rasheedamir opened this issue 5 years ago • 1 comments

https://docs.bitnami.com/tutorials/production-ready-charts/#use-non-root-containers

In order to make your Helm chart work with non-root containers, add the securityContext section to your yaml files.

e.g.

spec:
  {{- if .Values.securityContext.enabled }}
  securityContext:
    fsGroup: {{ .Values.securityContext.fsGroup }}
  {{- end }}

rasheedamir avatar Jun 08 '20 20:06 rasheedamir

Security context is now available in specs. However, we may want to drop permissions by default.

aslafy-z avatar May 28 '25 14:05 aslafy-z