This commit is contained in:
2023-07-25 18:43:53 +02:00
parent e5f5f06642
commit e715cdf9af
2 changed files with 15 additions and 4 deletions

View File

@@ -15,9 +15,6 @@ resource "kubectl_manifest" "deploy" {
template:
metadata:
labels: ${jsonencode(local.common-labels)}
annotations:
container.apparmor.security.beta.kubernetes.io/code-server: unconfined
container.seccomp.security.alpha.kubernetes.io/code-server: unconfined
spec:
securityContext:
fsGroup: 1000
@@ -36,7 +33,6 @@ resource "kubectl_manifest" "deploy" {
runAsNonRoot: true
runAsUser: 1000
privileged: true
procMount: unmasked
env:
- name: USER
value: coder