Run as non-root and root group for OpenShift compatibility ADDENDUM (#5)

adobe · Jun 12, 2023 · 4f2c3b0 · 4f2c3b0
1 parent 17c70a4
commit 4f2c3b0
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 6 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -30,8 +30,6 @@ RUN CGO_ENABLED=0 go build \
 FROM alpine:3.17
 COPY --from=builder /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
 COPY --from=builder /app/bin/kminion /app/kminion
-RUN chown -R 1001:0 /app/kminion \
-    && chmod -R g=u /app/kminion
-USER 1001
+RUN chmod -R +x /app/kminion
 
 ENTRYPOINT ["/app/kminion"]
diff --git a/charts/kminion/values.yaml b/charts/kminion/values.yaml
@@ -28,9 +28,9 @@ podAnnotations: {}
 #  prometheus.io/port: "8080"
 #  prometheus.io/path: "/metrics"
 
-podSecurityContext:
-  runAsUser: 99
-  fsGroup: 99
+podSecurityContext: {}
+  # runAsUser: 99
+  # fsGroup: 99
 
 ## See `kubectl explain poddisruptionbudget.spec` for more
 ## ref: https://kubernetes.io/docs/tasks/run-application/configure-pdb/