From a9028ca7f5ce76c19432c32264a7b3240cf4f2e1 Mon Sep 17 00:00:00 2001 From: JJGadgets Date: Wed, 17 Apr 2024 00:03:26 +0800 Subject: [PATCH] fix(collabora): use upstream UID --- kube/deploy/apps/collabora/app/hr.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/kube/deploy/apps/collabora/app/hr.yaml b/kube/deploy/apps/collabora/app/hr.yaml index c3f08c71..87a7f6c7 100644 --- a/kube/deploy/apps/collabora/app/hr.yaml +++ b/kube/deploy/apps/collabora/app/hr.yaml @@ -27,7 +27,7 @@ spec: image: &img repository: "docker.io/collabora/code" tag: "23.05.10.1.1" - command: ["/usr/bin/coolwsd", "--version", "--use-env-vars", "--o:sys_template_path=/opt/cool/systemplate", "--o:child_root_path=/opt/cool/child-roots", "--o:file_server_root_path=/usr/share/coolwsd", "--o:logging.color=false", "--o:stop_on_config_change=true", "--o:ssl.enable=false", "--o:ssl.termination=true", "--o:num_prespawn_children=3"] + #command: ["/usr/bin/coolwsd", "--version", "--use-env-vars", "--o:sys_template_path=/opt/cool/systemplate", "--o:child_root_path=/opt/cool/child-roots", "--o:file_server_root_path=/usr/share/coolwsd", "--o:logging.color=false", "--o:stop_on_config_change=true", "--o:ssl.enable=false", "--o:ssl.termination=true", "--o:num_prespawn_children=3"] env: TZ: "${CONFIG_TZ}" DONT_GEN_SSL_CERT: "true" @@ -75,8 +75,8 @@ spec: enableServiceLinks: false securityContext: runAsNonRoot: true - runAsUser: &uid ${APP_UID_COLLABORA} - runAsGroup: *uid + runAsUser: &uid 100 + runAsGroup: 101 fsGroup: *uid fsGroupChangePolicy: "Always" seccompProfile: { type: "RuntimeDefault" }