From 4f48155dc5062f001a7ef13e037e03e0bcec839c Mon Sep 17 00:00:00 2001 From: Amit Sagtani Date: Wed, 7 Feb 2024 15:15:18 +0100 Subject: [PATCH 1/2] replace runAsNonRoot to user group and id of 1000 --- charts/account-pages/values.yaml | 3 ++- charts/team-settings/values.yaml | 3 ++- charts/webapp/values.yaml | 3 ++- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/charts/account-pages/values.yaml b/charts/account-pages/values.yaml index 14d7f59ca5..4148cfd8dc 100644 --- a/charts/account-pages/values.yaml +++ b/charts/account-pages/values.yaml @@ -55,6 +55,7 @@ podSecurityContext: capabilities: drop: - ALL - runAsNonRoot: true + runAsUser: 1000 + runAsGroup: 1000 seccompProfile: type: RuntimeDefault diff --git a/charts/team-settings/values.yaml b/charts/team-settings/values.yaml index edfcf9adf9..a8c8dc8228 100644 --- a/charts/team-settings/values.yaml +++ b/charts/team-settings/values.yaml @@ -59,6 +59,7 @@ podSecurityContext: capabilities: drop: - ALL - runAsNonRoot: true + runAsUser: 1000 + runAsGroup: 1000 seccompProfile: type: RuntimeDefault diff --git a/charts/webapp/values.yaml b/charts/webapp/values.yaml index 3aaa07fa28..c96883e53d 100644 --- a/charts/webapp/values.yaml +++ b/charts/webapp/values.yaml @@ -56,6 +56,7 @@ podSecurityContext: capabilities: drop: - ALL - runAsNonRoot: true + runAsUser: 1000 + runAsGroup: 1000 seccompProfile: type: RuntimeDefault From 1884477ed876d672816b0805b374f5afb13864db Mon Sep 17 00:00:00 2001 From: Amit Sagtani Date: Wed, 7 Feb 2024 16:20:03 +0100 Subject: [PATCH 2/2] add changelog --- changelog.d/5-internal/update-webapp-teams-accounts-helm-values | 1 + 1 file changed, 1 insertion(+) create mode 100644 changelog.d/5-internal/update-webapp-teams-accounts-helm-values diff --git a/changelog.d/5-internal/update-webapp-teams-accounts-helm-values b/changelog.d/5-internal/update-webapp-teams-accounts-helm-values new file mode 100644 index 0000000000..fe77524055 --- /dev/null +++ b/changelog.d/5-internal/update-webapp-teams-accounts-helm-values @@ -0,0 +1 @@ +replace runAsNonRoot with runAsUser and runAsGroup 1000