Skip to content

Commit 0421edb

Browse files
committed
Fix update function for gdscan pod #93
Set user and group for all pods in values.yaml
1 parent 4212d6f commit 0421edb

File tree

1 file changed

+10
-1
lines changed

1 file changed

+10
-1
lines changed

charts/vaas/values.yaml

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -160,6 +160,8 @@ gateway:
160160
drop: ["ALL"]
161161
seccompProfile:
162162
type: RuntimeDefault
163+
runAsUser: 1001
164+
runAsGroup: 1001
163165
image:
164166
repository: ghcr.io/gdatasoftwareag/vaas/gateway
165167
pullPolicy: Always
@@ -211,6 +213,8 @@ gdscan:
211213
drop: ["ALL"]
212214
seccompProfile:
213215
type: RuntimeDefault
216+
runAsUser: 1001
217+
runAsGroup: 1001
214218
terminationGracePeriodSeconds: 30
215219

216220
nameOverride: ""
@@ -283,6 +287,8 @@ gdscan:
283287
drop: ["ALL"]
284288
seccompProfile:
285289
type: RuntimeDefault
290+
runAsUser: 1000
291+
runAsGroup: 1000
286292
podAnnotations: {}
287293
enabled: true
288294
# every hour
@@ -316,7 +322,8 @@ redis:
316322
enabled: false
317323
podSecurityContext:
318324
enabled: true
319-
fsGroup: 1654
325+
fsGroupChangePolicy: "OnRootMismatch"
326+
fsGroup: 1001
320327
containerSecurityContext:
321328
enabled: true
322329
readOnlyRootFilesystem: true
@@ -326,5 +333,7 @@ redis:
326333
drop: ["ALL"]
327334
seccompProfile:
328335
type: RuntimeDefault
336+
runAsUser: 1001
337+
runAsGroup: 1001
329338
networkPolicy:
330339
enabled: true

0 commit comments

Comments
 (0)