- WANTED_UID=1000 detects root → chowns volumes + gosu 1000 app (runtime non-root) - Fixes whoami (root phase OK) + double-perm fix w/ init - PodSecurity OK (per-container fields; pod no runAsNonRoot) |
||
|---|---|---|
| .. | ||
| customer1 | ||
| monitoring/dashboards | ||
- WANTED_UID=1000 detects root → chowns volumes + gosu 1000 app (runtime non-root) - Fixes whoami (root phase OK) + double-perm fix w/ init - PodSecurity OK (per-container fields; pod no runAsNonRoot) |
||
|---|---|---|
| .. | ||
| customer1 | ||
| monitoring/dashboards | ||