Set podSecurityContext.fsGroup to 0 instead of 999

ChunyiLyu · ChunyiLyu · commit da92f69c3401 · 2022-01-11T13:54:09.000Z
diff --git a/internal/resource/statefulset.go b/internal/resource/statefulset.go
@@ -555,7 +555,7 @@ func (builder *StatefulSetBuilder) podTemplateSpec(previousPodAnnotations map[st
 				},
 			},
 			SecurityContext: &corev1.PodSecurityContext{
-				FSGroup:   &rabbitmqUID,
+				FSGroup:   pointer.Int64(0),
 				RunAsUser: &rabbitmqUID,
 			},
 			ImagePullSecrets:              builder.Instance.Spec.ImagePullSecrets,
diff --git a/internal/resource/statefulset_test.go b/internal/resource/statefulset_test.go
@@ -1307,7 +1307,7 @@ default_pass = {{ .Data.data.password }}
 			rmqUID := int64(999)
 
 			expectedPodSecurityContext := &corev1.PodSecurityContext{
-				FSGroup:   &rmqUID,
+				FSGroup:   pointer.Int64(0),
 				RunAsUser: &rmqUID,
 			}
 

Original file line number	Diff line number	Diff line change
`@@ -1307,7 +1307,7 @@ default_pass = {{ .Data.data.password }}`
`1307`	`1307`	`rmqUID := int64(999)`
`1308`	`1308`
`1309`	`1309`	`expectedPodSecurityContext := &corev1.PodSecurityContext{`
`1310`		`- FSGroup: &rmqUID,`
	`1310`	`+ FSGroup: pointer.Int64(0),`
`1311`	`1311`	`RunAsUser: &rmqUID,`
`1312`	`1312`	`}`
`1313`	`1313`