sirius/gcloud-lab
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix priv issue

Browse source
This commit is contained in:
sirius0xdev 2026-05-08 03:01:42 +00:00
parent da8d41c286
commit 1892006ab2
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
apps/base/customer1/hermes-agent/new-deployment.yaml
View file

@ -126,6 +126,8 @@ spec:
value: "1024" value: "1024"
- name: WANTED_GID - name: WANTED_GID
value: "1000" value: "1000"
- name: HERMES_SKIP_CHMOD
value: "1"
volumeMounts: volumeMounts:
- name: hermes-home - name: hermes-home
@ -150,7 +152,7 @@ spec:
runAsUser: 1024 runAsUser: 1024
runAsGroup: 1000 runAsGroup: 1000
runAsNonRoot: true runAsNonRoot: true
allowPrivilegeEscalation: false allowPrivilegeEscalation: true
readOnlyRootFilesystem: false readOnlyRootFilesystem: false
seccompProfile: seccompProfile:
type: RuntimeDefault type: RuntimeDefault