Merge pull request #58 from s-urbaniak/bz-1962687

Bug 1962687: manifests,assets: set runAsUser to not run as root
openshift · May 25, 2021 · 148ab2a · 148ab2a
2 parents c17d581 + c47c127
commit 148ab2a
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 0 deletions.
diff --git a/bindata/kube-storage-version-migrator/deployment.yaml b/bindata/kube-storage-version-migrator/deployment.yaml
@@ -30,6 +30,8 @@ spec:
             requests:
               cpu: 10m
               memory: 200Mi
+        securityContext:
+          runAsUser: 1001
       priorityClassName: system-cluster-critical
       tolerations:
         - key: node-role.kubernetes.io/master

diff --git a/...fests/0000_40_kube-storage-version-migrator-operator_07_deployment-ibm-cloud-managed.yaml b/...fests/0000_40_kube-storage-version-migrator-operator_07_deployment-ibm-cloud-managed.yaml
@@ -48,6 +48,8 @@ spec:
           requests:
             cpu: 10m
             memory: 50Mi
+        securityContext:
+          runAsUser: 1001
         terminationMessagePolicy: FallbackToLogsOnError
         volumeMounts:
         - mountPath: /var/run/configmaps/config

diff --git a/manifests/0000_40_kube-storage-version-migrator-operator_07_deployment.yaml b/manifests/0000_40_kube-storage-version-migrator-operator_07_deployment.yaml
@@ -38,6 +38,8 @@ spec:
           requests:
             memory: 50Mi
             cpu: 10m
+        securityContext:
+          runAsUser: 1001
         volumeMounts:
           - mountPath: /var/run/configmaps/config
             name: config

diff --git a/pkg/operator/assets/bindata.go b/pkg/operator/assets/bindata.go