Skip to content

Commit 13c799c

Browse files
authored
Remove securityContext from manager Deployment (#751)
Removing unnecessary securityContext from manager Pod: - runAsUser & runAsGroup are already enabled by the `USER` line of the Dockerfile - fsGroup is unneeded since the manager mounts no volumes. The securityContext field overrides some of Openshift's arbitrary user handling, while providing no benefit to the operator. Removing it provides the same security guarantees as before, while also making Openshift installation experience the same as any other Kubernetes distribution.
1 parent 43e16bb commit 13c799c

File tree

1 file changed

+0
-4
lines changed

1 file changed

+0
-4
lines changed

config/manager/manager.yaml

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -30,10 +30,6 @@ spec:
3030
app.kubernetes.io/part-of: rabbitmq
3131
spec:
3232
serviceAccountName: rabbitmq-cluster-operator
33-
securityContext:
34-
runAsUser: 1000
35-
runAsGroup: 1000
36-
fsGroup: 1000
3733
containers:
3834
- command:
3935
- /manager

0 commit comments

Comments
 (0)