Skip to content

Commit

Permalink
make registry-init privileged v3
Browse files Browse the repository at this point in the history
  • Loading branch information
pPrecel committed Apr 30, 2024
1 parent 1138fad commit f82c407
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions config/serverless/charts/docker-registry/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -131,13 +131,14 @@ initContainers:
# this is required to allow the initContainer to chmod the volumemount for the registry storage volume. This is incompatible with the security requirements above and should be fixed in the future.
runAsUser: 0
runAsGroup: 0
privileged: true # TODO: remove this field after resolving TODO in the init container
privileged: false
allowPrivilegeEscalation: false
capabilities:
drop: ["ALL"]
add: ["CHOWN"]
procMount: default # Optional. The default is false if the entry is not there.
readOnlyRootFilesystem: true # Mandatory
# TODO: remove this field after resolving TODO in the init container
readOnlyRootFilesystem: false # Mandatory (true)

pod:
# the following guidelines should be followed for this https://github.com/kyma-project/community/tree/main/concepts/psp-replacement
Expand Down

0 comments on commit f82c407

Please sign in to comment.