[#741] Enforce runAsNonRoot for the manager container

artemiscloud · Feb 27, 2024 · dffc903 · dffc903
1 parent 32035d8
commit dffc903
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 0 deletions.
diff --git a/bundle/manifests/activemq-artemis-operator.clusterserviceversion.yaml b/bundle/manifests/activemq-artemis-operator.clusterserviceversion.yaml
@@ -2734,6 +2734,7 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  runAsNonRoot: true
                   seccompProfile:
                     type: RuntimeDefault
               securityContext:

diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -74,6 +74,7 @@ spec:
           capabilities:
             drop:
             - ALL
+          runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault
         livenessProbe:

diff --git a/deploy/activemq-artemis-operator.yaml b/deploy/activemq-artemis-operator.yaml
@@ -5207,6 +5207,7 @@ spec:
           capabilities:
             drop:
             - ALL
+          runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault
       securityContext:

diff --git a/deploy/operator.yaml b/deploy/operator.yaml
@@ -134,6 +134,7 @@ spec:
           capabilities:
             drop:
             - ALL
+          runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault
       securityContext: