From 9e80373078c233e3e2b6c445f2aeb1f71011979f Mon Sep 17 00:00:00 2001
From: Muhammed Hussein Karimi <info@karimi.dev>
Date: Sat, 8 Jun 2024 15:43:56 +0330
Subject: [PATCH] =?UTF-8?q?=F0=9F=90=9B=20fix:=20runAsNonRoot?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Muhammed Hussein Karimi <info@karimi.dev>
---
 deployments/kubernetes/values.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/deployments/kubernetes/values.yaml b/deployments/kubernetes/values.yaml
index 2012f0f..890b5db 100644
--- a/deployments/kubernetes/values.yaml
+++ b/deployments/kubernetes/values.yaml
@@ -3,6 +3,10 @@ applicationName: storage-browser
 deployment:
   replicas: 2
 
+  containerSecurityContext:
+    readOnlyRootFilesystem: true
+    runAsNonRoot: false ## TODO: K8s cannot verify nextjs and nodejs user/group
+
   readinessProbe:
     enabled: true
     failureThreshold: 3