diff --git a/site/content/docs/main/restic.md b/site/content/docs/main/restic.md index 8873c1ff5..096abda6e 100644 --- a/site/content/docs/main/restic.md +++ b/site/content/docs/main/restic.md @@ -393,11 +393,27 @@ data: # If not set, it will default to "128Mi". A value of "0" is treated as unbounded. memLimit: 128Mi - # "secCtxRunAsUser sets the securityContext.runAsUser value on the restic init containers during restore." + # "secCtxRunAsUser" sets the securityContext.runAsUser value on the restic init containers during restore. secCtxRunAsUser: 1001 - # "secCtxRunAsGroup sets the securityContext.runAsGroup value on the restic init containers during restore." + # "secCtxRunAsGroup" sets the securityContext.runAsGroup value on the restic init containers during restore. secCtxRunAsGroup: 999 + + # "secCtxAllowPrivilegeEscalation" sets the securityContext.allowPrivilegeEscalation value on the restic init containers during restore. + secCtxAllowPrivilegeEscalation: false + + # "secCtx" sets the securityContext object value on the restic init containers during restore. + # This key override `secCtxRunAsUser`, `secCtxRunAsGroup`, `secCtxAllowPrivilegeEscalation` if `secCtx.runAsUser`, `secCtx.runAsGroup` or `secCtx.allowPrivilegeEscalation` are set. + secCtx: | + capabilities: + drop: + - ALL + add: [] + allowPrivilegeEscalation: false + readOnlyRootFilesystem: true + runAsUser: 1001 + runAsGroup: 999 + ``` ## Troubleshooting