Run Immich workloads as the library owner

2026-10-22 10:43:06 +02:00
parent ddf1a1ec1a
commit d695bab679
1 changed files with 10 additions and 0 deletions
@@ -46,6 +46,10 @@ server:
            runAsGroup: 65534
      containers:
        main:
+          securityContext:
+            runAsNonRoot: true
+            runAsUser: 1000
+            runAsGroup: 1000
          env:
            DB_HOSTNAME: immich-postgresql-rw
            DB_DATABASE_NAME: immich
@@ -85,6 +89,12 @@ machine-learning:
          - key: node-role.kubernetes.io/control-plane
            operator: Exists
            effect: NoSchedule
+      containers:
+        main:
+          securityContext:
+            runAsNonRoot: true
+            runAsUser: 1000
+            runAsGroup: 1000
      initContainers:
        check-bcachefs-library:
          image: