Fix dbgate securityContext (#12)

Signed-off-by: Arnob kumar saha <[email protected]>
kubedb · Sep 6, 2024 · 05d1691 · 05d1691
1 parent f72d90a
commit 05d1691
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/charts/dbgate/README.md b/charts/dbgate/README.md
@@ -65,7 +65,7 @@ The following table lists the configurable parameters of the `dbgate` chart and
 | serviceAccount.name                | The name of the service account to use. If not set and create is true, a name is generated using the fullname template                                                                                                            | <code>""</code>                                                                                                                                                                                |
 | podAnnotations                     |                                                                                                                                                                                                                                   | <code>{}</code>                                                                                                                                                                                |
 | podSecurityContext                 |                                                                                                                                                                                                                                   | <code>{}</code>                                                                                                                                                                                |
-| securityContext                    |                                                                                                                                                                                                                                   | <code>{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":true,"runAsNonRoot":true,"runAsUser":65534,"seccompProfile":{"type":"RuntimeDefault"}}</code> |
+| securityContext                    |                                                                                                                                                                                                                                   | <code>{"allowPrivilegeEscalation":false,"capabilities":{"drop":["ALL"]},"readOnlyRootFilesystem":false,"runAsNonRoot":true,"runAsUser":1000,"seccompProfile":{"type":"RuntimeDefault"}}</code> |
 | service.type                       |                                                                                                                                                                                                                                   | <code>ClusterIP</code>                                                                                                                                                                         |
 | service.port                       |                                                                                                                                                                                                                                   | <code>80</code>                                                                                                                                                                                |
 | resources                          |                                                                                                                                                                                                                                   | <code>{}</code>                                                                                                                                                                                |

diff --git a/charts/dbgate/values.yaml b/charts/dbgate/values.yaml
@@ -46,9 +46,9 @@ securityContext: # +doc-gen:break
   allowPrivilegeEscalation: false
   capabilities:
     drop: ["ALL"]
-  readOnlyRootFilesystem: true
+  readOnlyRootFilesystem: false
   runAsNonRoot: true
-  runAsUser: 65534
+  runAsUser: 1000
   seccompProfile:
     type: RuntimeDefault