feat: securityContext privileged

ADORSYS-GIS · Nov 20, 2024 · 7ec86f5 · 7ec86f5
1 parent a9518d9
commit 7ec86f5
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 8 deletions.
diff --git a/charts/wazuh/templates/manager/sts.wazuh-master.yaml b/charts/wazuh/templates/manager/sts.wazuh-master.yaml
@@ -73,10 +73,6 @@ spec:
           imagePullPolicy: IfNotPresent
           ##
           ##
-          securityContext:
-            privileged: true
-          ##
-          ##
           command:
             - /bin/sh
             - -c
@@ -110,7 +106,7 @@ spec:
         {{ include "common.tplvalues.render" (dict "value" . "context" $) | nindent 8}}
         {{- end }}
       securityContext:
-        fsGroup: 101
+        fsGroup: 1000
       containers:
         - name: wazuh-manager
           {{ $imageTpl := include "common.images.image" (dict "imageRoot" .image "global" $.Values.global) }}
@@ -119,9 +115,10 @@ spec:
           resources: {{ include "common.tplvalues.render" (dict "value" . "context" $) | nindent 12}}
           {{- end }}
           securityContext:
-            privileged: true
             capabilities:
               add: [ "SYS_CHROOT" ]
+            runAsUser: 1000
+            runAsGroup: 1000
           volumeMounts:
             - name: {{ $name }}
               mountPath: /var/ossec/api/configuration

diff --git a/charts/wazuh/templates/manager/sts.wazuh-worker.yaml b/charts/wazuh/templates/manager/sts.wazuh-worker.yaml
@@ -120,9 +120,10 @@ spec:
           resources: {{ include "common.tplvalues.render" (dict "value" . "context" $) | nindent 12}}
           {{- end }}
           securityContext:
-            privileged: true
             capabilities:
               add: [ "SYS_CHROOT" ]
+            runAsUser: 1000
+            runAsGroup: 1000
           volumeMounts:
             - name: {{ $name }}
               mountPath: /var/ossec/api/configuration

diff --git a/charts/wazuh/values.yaml b/charts/wazuh/values.yaml
@@ -253,7 +253,7 @@ indexer:
       cpu: 500m
       memory: 1Gi
     limits:
-      cpu: 1000m
+      cpu: 1
       memory: 2Gi
 
 worker: