rock/poimen-memory
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
05c0943bd4025a78f555143d3b68a6001347dc29
poimen-memory/k8s
T
History
rock 05c0943bd4
Build and Push / Test (push) Successful in 6m55s
Details
Build and Push / Build and push image (push) Successful in 23s
Details
fix: add PodSecurity contexts to all poimen deployments 
- runAsNonRoot, runAsUser 1000, seccompProfile RuntimeDefault
- Drop ALL capabilities, no privilege escalation
- readOnlyRootFilesystem on memory (with /tmp emptyDir)
- git-sync init runs as root with only CHOWN+DAC_OVERRIDE caps
- All pods use their service accounts
2026-08-30 07:20:08 -07:00
..
app
fix: add PodSecurity contexts to all poimen deployments
2026-08-30 07:20:08 -07:00
argocd
Add ArgoCD Application for auto-deployment (poimen-memory-app)
2026-08-23 09:46:58 -07:00
infra
feat: simplify queue naming, remove stale docs, add Queue CRDs
2026-08-28 14:45:53 -07:00