Merge pull request #733 from arunsworld/run-ui-as-non-root

alexandrevilain · May 23, 2024 · 6b858c0 · 6b858c0
2 parents f831a02 + 6075308
commit 6b858c0
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/internal/resource/ui/deployment_builder.go b/internal/resource/ui/deployment_builder.go
@@ -148,7 +148,11 @@ func (b *DeploymentBuilder) Update(object client.Object) error {
 			TerminationGracePeriodSeconds: ptr.To[int64](30),
 			DNSPolicy:                     corev1.DNSClusterFirst,
 			SchedulerName:                 corev1.DefaultSchedulerName,
-			SecurityContext:               &corev1.PodSecurityContext{},
+			SecurityContext: &corev1.PodSecurityContext{
+				RunAsUser:    ptr.To[int64](5000),
+				RunAsGroup:   ptr.To[int64](5000),
+				RunAsNonRoot: ptr.To[bool](true),
+			},
 		},
 	}