docs: comment that 65534 relates to the nobody user/group

jupyterhub · Oct 5, 2020 · 67a83d6 · 67a83d6
1 parent 446a4b0
commit 67a83d6
Showing 1 changed file with 16 additions and 16 deletions.
diff --git a/jupyterhub/values.yaml b/jupyterhub/values.yaml
@@ -144,8 +144,8 @@ proxy:
     loadBalancerSourceRanges: []
   chp:
     containerSecurityContext:
-      runAsUser: 65534
-      runAsGroup: 65534
+      runAsUser: 65534  # nobody user
+      runAsGroup: 65534 # nobody group
       allowPrivilegeEscalation: false
     image:
       name: jupyterhub/configurable-http-proxy
@@ -165,8 +165,8 @@ proxy:
     extraEnv: {}
   traefik:
     containerSecurityContext:
-      runAsUser: 65534
-      runAsGroup: 65534
+      runAsUser: 65534  # nobody user
+      runAsGroup: 65534 # nobody group
       allowPrivilegeEscalation: false
     image:
       name: traefik
@@ -183,8 +183,8 @@ proxy:
     extraDynamicConfig: {}
   secretSync:
     containerSecurityContext:
-      runAsUser: 65534
-      runAsGroup: 65534
+      runAsUser: 65534  # nobody user
+      runAsGroup: 65534 # nobody group
       allowPrivilegeEscalation: false
     image:
       name: jupyterhub/k8s-secret-sync
@@ -344,8 +344,8 @@ scheduling:
         enabled:
           - name: NodeResourcesMostAllocated
     containerSecurityContext:
-      runAsUser: 65534
-      runAsGroup: 65534
+      runAsUser: 65534  # nobody user
+      runAsGroup: 65534 # nobody group
       allowPrivilegeEscalation: false
     image:
       name: k8s.gcr.io/kube-scheduler
@@ -367,8 +367,8 @@ scheduling:
     enabled: true
     replicas: 0
     containerSecurityContext:
-      runAsUser: 65534
-      runAsGroup: 65534
+      runAsUser: 65534  # nobody user
+      runAsGroup: 65534 # nobody group
       allowPrivilegeEscalation: false
   corePods:
     nodeAffinity:
@@ -385,26 +385,26 @@ prePuller:
       cpu: 0
       memory: 0
   containerSecurityContext:
-    runAsUser: 65534
-    runAsGroup: 65534
+    runAsUser: 65534  # nobody user
+    runAsGroup: 65534 # nobody group
     allowPrivilegeEscalation: false
   hook:
     enabled: true
     image:
       name: jupyterhub/k8s-image-awaiter
       tag: 'set-by-chartpress'
     containerSecurityContext:
-      runAsUser: 65534
-      runAsGroup: 65534
+      runAsUser: 65534  # nobody user
+      runAsGroup: 65534 # nobody group
       allowPrivilegeEscalation: false
     podSchedulingWaitDuration: 10
   continuous:
     enabled: true
   extraImages: {}
   pause:
     containerSecurityContext:
-      runAsUser: 65534
-      runAsGroup: 65534
+      runAsUser: 65534  # nobody user
+      runAsGroup: 65534 # nobody group
       allowPrivilegeEscalation: false
     image:
       name: k8s.gcr.io/pause