fix: drop nobody user from dvcr

Signed-off-by: Maksim Fedotov <[email protected]>
deckhouse · Nov 14, 2024 · 9ec6776 · 9ec6776
1 parent f1f5bec
commit 9ec6776
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/templates/dvcr/deployment.yaml b/templates/dvcr/deployment.yaml
@@ -97,6 +97,7 @@ spec:
         {{- $kubeRbacProxySettings := dict }}
         {{- $_ := set $kubeRbacProxySettings "resource" "deployment" }}
         {{- $_ := set $kubeRbacProxySettings "name" "dvcr" }}
+        {{- $_ := set $kubeRbacProxySettings "runAsUserNobody" false }}
         {{- $_ := set $kubeRbacProxySettings "upstream" "https://127.0.0.1:5001/metrics" }}
         {{- include "kube_rbac_proxy.sidecar_container" (tuple . $kubeRbacProxySettings) | nindent 8 }}
       volumes: {{ include "dvcr.volumes" . | nindent 8 }}