Fix update function for gdscan pod #93

Set user and group for all pods in values.yaml
GDATASoftwareAG · Feb 4, 2025 · 02bcedb · 02bcedb
1 parent 4212d6f
commit 02bcedb
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/charts/vaas/values.yaml b/charts/vaas/values.yaml
@@ -160,6 +160,8 @@ gateway:
       drop: ["ALL"]
     seccompProfile:
       type: RuntimeDefault
+    runAsUser: 1001
+    runAsGroup: 1001
   image:
     repository: ghcr.io/gdatasoftwareag/vaas/gateway
     pullPolicy: Always
@@ -211,6 +213,8 @@ gdscan:
         drop: ["ALL"]
       seccompProfile:
         type: RuntimeDefault
+      runAsUser: 1001
+      runAsGroup: 1001
   terminationGracePeriodSeconds: 30
 
   nameOverride: ""
@@ -283,6 +287,8 @@ gdscan:
         drop: ["ALL"]
       seccompProfile:
         type: RuntimeDefault
+      runAsUser: 1000
+      runAsGroup: 1000
     podAnnotations: {}
     enabled: true
     # every hour
@@ -317,6 +323,8 @@ redis:
     podSecurityContext:
       enabled: true
       fsGroup: 1654
+      fsGroupChangePolicy: "OnRootMismatch"
+      fsGroup: 1001      
     containerSecurityContext:
       enabled: true
       readOnlyRootFilesystem: true
@@ -326,5 +334,7 @@ redis:
         drop: ["ALL"]
       seccompProfile:
         type: RuntimeDefault
+      runAsUser: 1001
+      runAsGroup: 1001
   networkPolicy:
     enabled: true