Files
open-cluster-management/deploy/hub/deployment.yaml
Zhiwei Yin 54160128dd run as non-root
Signed-off-by: Zhiwei Yin <zyin@redhat.com>
2021-04-16 15:11:35 +08:00

32 lines
747 B
YAML

kind: Deployment
apiVersion: apps/v1
metadata:
name: hub-registration-controller
labels:
app: hub-registration-controller
spec:
replicas: 1
selector:
matchLabels:
app: hub-registration-controller
template:
metadata:
labels:
app: hub-registration-controller
spec:
serviceAccountName: hub-sa
containers:
- name: hub-controller
image: quay.io/open-cluster-management/registration:latest
imagePullPolicy: IfNotPresent
args:
- "/registration"
- "controller"
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
privileged: false
runAsNonRoot: true