fix(kyak): sec tuning comes later

Signed-off-by: Tyler Witlin <twitlin@witl.xyz>
coolguy1771 · Jun 21, 2024 · df4e265 · df4e265
1 parent ccfed79
commit df4e265
Showing 1 changed file with 7 additions and 7 deletions.
diff --git a/kubernetes/kyak/apps/auth/lldap/app/helmrelease.yaml b/kubernetes/kyak/apps/auth/lldap/app/helmrelease.yaml
@@ -71,19 +71,19 @@ spec:
                 enabled: false
             securityContext:
               allowPrivilegeEscalation: false
-              readOnlyRootFilesystem: false
-              capabilities: { drop: ["ALL"] }
+              # readOnlyRootFilesystem: false
+              # capabilities: { drop: ["ALL"] }
             resources:
               requests:
                 cpu: 10m
               limits:
                 memory: 128Mi
     defaultPodOptions:
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 65534
-        runAsGroup: 65534
-        seccompProfile: { type: RuntimeDefault }
+      # securityContext:
+      #   runAsNonRoot: true
+      #   runAsUser: 65534
+      #   runAsGroup: 65534
+      #   seccompProfile: { type: RuntimeDefault }
       topologySpreadConstraints:
         - maxSkew: 1
           topologyKey: kubernetes.io/hostname