chore: tweak

joryirving · Nov 30, 2024 · 39f15a1 · 39f15a1
1 parent d940c4c
commit 39f15a1
Showing 1 changed file with 8 additions and 5 deletions.
diff --git a/kubernetes/main/apps/downloads/dashbrr/app/helmrelease.yaml b/kubernetes/main/apps/downloads/dashbrr/app/helmrelease.yaml
@@ -65,11 +65,14 @@ spec:
               allowPrivilegeEscalation: false
               readOnlyRootFilesystem: true
               capabilities: { drop: ["ALL"] }
-            resources:
-              requests:
-                cpu: 100m
-              limits:
-                memory: 2Gi
+    defaultPodOptions:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 568
+        runAsGroup: 568
+        fsGroup: 568
+        fsGroupChangePolicy: OnRootMismatch
+        seccompProfile: { type: RuntimeDefault }
     service:
       app:
         controller: *app