postgres: run unprivilged

Change-Id: I8d7e92093c0df91b6cd601a4d8e2484fca97ee88
2020-01-22 21:48:48 +01:00 · 2020-01-22 21:48:48 +01:00 · a2ee865a0c
commit a2ee865a0c
parent 083b176f74
1 changed files with 3 additions and 0 deletions
--- a/kube/postgres.libsonnet
+++ b/kube/postgres.libsonnet
@ -67,6 +67,9 @@ local kube = import "kube.libsonnet";
                            },
                        },
                    },
+                    securityContext: {
+                        runAsUser: 999,
+                    },
                },
            },
        },