From 9ec67769dbc3b700ea5d5ef39e1e0be9481cea3e Mon Sep 17 00:00:00 2001
From: Maksim Fedotov <maksim.fedotov@flant.com>
Date: Thu, 14 Nov 2024 22:35:36 +0300
Subject: [PATCH] fix: drop nobody user from dvcr

Signed-off-by: Maksim Fedotov <maksim.fedotov@flant.com>
---
 templates/dvcr/deployment.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/templates/dvcr/deployment.yaml b/templates/dvcr/deployment.yaml
index e3d7af2c3..d2945ea59 100644
--- a/templates/dvcr/deployment.yaml
+++ b/templates/dvcr/deployment.yaml
@@ -97,6 +97,7 @@ spec:
         {{- $kubeRbacProxySettings := dict }}
         {{- $_ := set $kubeRbacProxySettings "resource" "deployment" }}
         {{- $_ := set $kubeRbacProxySettings "name" "dvcr" }}
+        {{- $_ := set $kubeRbacProxySettings "runAsUserNobody" false }}
         {{- $_ := set $kubeRbacProxySettings "upstream" "https://127.0.0.1:5001/metrics" }}
         {{- include "kube_rbac_proxy.sidecar_container" (tuple . $kubeRbacProxySettings) | nindent 8 }}
       volumes: {{ include "dvcr.volumes" . | nindent 8 }}