github-featured / triggerdotdev--trigger.dev

发布

0 发布 4,184 Git 标签

RSS 订阅源
  • re2-test-supervisor-runtime-uid e91fb746f7
    比较

    feat(supervisor): configurable security context for run pods

    frostbyte_neo 发布于 2026-08-18 17:40:18 +00:00 | 228 次提交 在此版本后已推送到 main

    Adds KUBERNETES_RUNNER_SECURITY_CONTEXT (off | baseline | restricted), selecting how constrained the run container is.

    baseline drops the capability bounding set and blocks privilege escalation. restricted additionally pins the container to a non-root uid, chosen by runtime so bun images get their own.

    Default is off, so this is inert on merge.

    下载附件