Commit Graph
3 Commits
Author SHA1 Message Date
rock 05c0943bd4 fix: add PodSecurity contexts to all poimen deployments
Build and Push / Test (push) Successful in 6m55s
Build and Push / Build and push image (push) Successful in 23s
- runAsNonRoot, runAsUser 1000, seccompProfile RuntimeDefault
- Drop ALL capabilities, no privilege escalation
- readOnlyRootFilesystem on memory (with /tmp emptyDir)
- git-sync init runs as root with only CHOWN+DAC_OVERRIDE caps
- All pods use their service accounts
2026-08-30 07:20:08 -07:00
rock a4a4053d57 feat: add Obsidian vault projection with Longhorn storage (#13)
Build and Push / Test (push) Successful in 3m37s
Build and Push / Build and push image (push) Successful in 2m45s
2026-08-24 01:58:39 +00:00
Story Crater Bot a0ebc1183c Add K8s app deployment, Dockerfile, and CI workflow (Option A)
ci / markdown (push) Waiting to run
2026-08-23 00:01:30 -07:00