Merge pull request #105 from m00nyONE/patch-1

fix: add securityContext to allow running as non root user
zakkg3 · Dec 22, 2023 · 430b07f · 430b07f
2 parents 7453030 + d402eed
commit 430b07f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/charts/cluster-secret/templates/deployment.yaml b/charts/cluster-secret/templates/deployment.yaml
@@ -23,6 +23,8 @@ spec:
         app: clustersecret
       {{- include "cluster-secret.selectorLabels" . | nindent 8 }}
     spec:
+      securityContext:
+        runAsUser: 100 # 100 is set by the container and can NOT be changed here - this would result in a getpwuid() error
       containers:
       - env:
         - name: KUBERNETES_CLUSTER_DOMAIN
@@ -34,6 +36,8 @@ spec:
         image: {{ .Values.clustersecret.clustersecret.image.repository }}:{{ .Values.clustersecret.clustersecret.image.tag
           | default .Chart.AppVersion }}
         name: clustersecret
+        securityContext:
+          runAsUser: 100 # 100 is set by the container and can NOT be changed here - this would result in a getpwuid() error
         livenessProbe:
           httpGet:
             path: /healthz