From 3c4c6dae922586b23ca148f54fc5f8f64ccbe639 Mon Sep 17 00:00:00 2001 From: Ahmed Waleed Malik Date: Tue, 8 Jun 2021 22:14:20 +0500 Subject: [PATCH] Remove runAsUser specification from Security Context (#1972) This fails on openshift since we cannot specify users within this range. Also, this template should be as close as possible to the vanilla manifest for deployment https://github.com/kyverno/kyverno/blob/main/definitions/release/install.yaml Vanilla manifest omits the user specification https://github.com/kyverno/kyverno/blob/main/definitions/release/install.yaml#L2478 Signed-off-by: Waleed Malik --- charts/kyverno/templates/deployment.yaml | 2 -- 1 file changed, 2 deletions(-) diff --git a/charts/kyverno/templates/deployment.yaml b/charts/kyverno/templates/deployment.yaml index e0e4010586..5afcfa1c69 100644 --- a/charts/kyverno/templates/deployment.yaml +++ b/charts/kyverno/templates/deployment.yaml @@ -54,7 +54,6 @@ spec: resources: {{ tpl (toYaml .) $ | nindent 12 }} {{- end }} securityContext: - runAsUser: 1000 runAsNonRoot: true privileged: false allowPrivilegeEscalation: false @@ -82,7 +81,6 @@ spec: resources: {{ tpl (toYaml .) $ | nindent 12 }} {{- end }} securityContext: - runAsUser: 1000 runAsNonRoot: true privileged: false allowPrivilegeEscalation: false