update manifests

IBM · Jan 16, 2024 · ba3aca8 · ba3aca8
1 parent 1c3e7f9
commit ba3aca8
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 4 deletions.
diff --git a/deploy/kubernetes/driver/kubernetes/manifests/controller-server.yaml b/deploy/kubernetes/driver/kubernetes/manifests/controller-server.yaml
@@ -25,6 +25,7 @@ spec:
       securityContext:
         runAsNonRoot: true
         runAsUser: 2121
+        runAsGroup: 2121
       containers:
         - name: csi-provisioner
           image: MUSTPATCHWITHKUSTOMIZE

diff --git a/deploy/kubernetes/driver/kubernetes/manifests/node-server.yaml b/deploy/kubernetes/driver/kubernetes/manifests/node-server.yaml
@@ -23,13 +23,18 @@ spec:
       serviceAccountName: ibm-vpc-file-node-sa
       tolerations:
       - operator: Exists
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 2121
+        runAsGroup: 2121
       containers:
         - name: csi-driver-registrar
           image: MUSTPATCHWITHKUSTOMIZE
           imagePullPolicy: Always
           securityContext:
             runAsNonRoot: false
             runAsUser: 0
+            runAsGroup: 0
             privileged: false
           args:
             - "--v=5"
@@ -63,6 +68,7 @@ spec:
           securityContext:
             runAsNonRoot: false
             runAsUser: 0
+            runAsGroup: 0
             privileged: true
           image: MUSTPATCHWITHKUSTOMIZE
           imagePullPolicy: Always
@@ -133,10 +139,6 @@ spec:
               mountPath: /etc/storage_ibmc/cluster_info
         - name: liveness-probe
           image: MUSTPATCHWITHKUSTOMIZE
-          securityContext:
-            runAsNonRoot: false
-            runAsUser: 0
-            privileged: false
           args:
             - "--csi-address=$(CSI_ADDRESS)"
           env: