Skip to content

Commit f3a2c73

Browse files
Merge pull request #1934 from tchap/userns
CNTRLPLANE-1544: Enable user namespace for the operator
2 parents 2634c93 + c434346 commit f3a2c73

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

manifests/0000_20_kube-apiserver-operator_06_deployment.yaml

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,9 +24,12 @@ spec:
2424
labels:
2525
app: kube-apiserver-operator
2626
spec:
27+
hostUsers: false
2728
securityContext:
2829
runAsNonRoot: true
29-
runAsUser: 65534
30+
runAsUser: 1000
31+
runAsGroup: 1000
32+
fsGroup: 1000
3033
seccompProfile:
3134
type: RuntimeDefault
3235
automountServiceAccountToken: false # here to prevent deadlock, remove in 4.9

0 commit comments

Comments
 (0)