Merge pull request #1553 from facchettos/k8s-run-asroot

added defaults for k8s to run the syncer as root, to follow k3s
loft-sh · Feb 27, 2024 · 957c1dd · 957c1dd
2 parents 8d9ea29 + 77defcb
commit 957c1dd
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/charts/eks/values.yaml b/charts/eks/values.yaml
@@ -189,7 +189,10 @@ syncer:
   kubeConfigContextName: "my-vcluster"
   # Security context configuration
   securityContext: {}
-  podSecurityContext: {}
+  podSecurityContext:
+    allowPrivilegeEscalation: false
+    runAsUser: 0
+    runAsGroup: 0
   serviceAnnotations: {}
   # Storage settings for the vcluster
   storage:

diff --git a/charts/k8s/values.yaml b/charts/k8s/values.yaml
@@ -195,7 +195,10 @@ syncer:
   kubeConfigContextName: "my-vcluster"
   # Security context configuration
   securityContext: {}
-  podSecurityContext: {}
+  podSecurityContext:
+    allowPrivilegeEscalation: false
+    runAsUser: 0
+    runAsGroup: 0
   serviceAnnotations: {}
   # Storage settings for the vcluster
   storage: