search

sleighzy / k3s-traefik-forward-auth-openid-connect

Kubernetes manifest files to deploy Traefik v2 configuration for using the forward authentication middleware to integrate with Keycloak.
MIT License
65 stars 10 forks source link

Add AppArmor profile and run container as non-root user #1

Closed sleighzy closed 3 years ago

sleighzy commented 3 years ago

The traefik-forward-auth container is run as a non-root user, using nobody:nogroup in this deployment.

An AppArmor profile has been added to the deployment, all capabilities dropped, and the root filesystem is not writable.