Skip to content

Commit 57dcd7a

Browse files
authored
fix(ingress): the controller should not use root privileges (#183)
1 parent 358b660 commit 57dcd7a

File tree

2 files changed

+3
-6
lines changed

2 files changed

+3
-6
lines changed

charts/ingress-controller/templates/deployment.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,6 +83,6 @@ spec:
8383
configMap:
8484
name: {{ .Release.Name }}-ingress-config
8585
securityContext:
86-
runAsNonRoot: true
86+
{{- toYaml .Values.deployment.securityContext | nindent 8 }}
8787
serviceAccountName: {{ .Release.Name }}
8888
terminationGracePeriodSeconds: 10

charts/ingress-controller/values.yaml

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -26,11 +26,8 @@ deployment:
2626
nodeSelector: {}
2727
tolerations: []
2828
affinity: {}
29-
podSecurityContext:
30-
allowPrivilegeEscalation: false
31-
capabilities:
32-
drop:
33-
- ALL
29+
podSecurityContext: {}
30+
securityContext: {}
3431
topologySpreadConstraints: []
3532
image:
3633
repository: api7/api7-ingress-controller

0 commit comments

Comments
 (0)