diff --git a/deploy/helm/templates/statefulset.yaml b/deploy/helm/templates/statefulset.yaml index 34df5a6f8f..af9303e061 100644 --- a/deploy/helm/templates/statefulset.yaml +++ b/deploy/helm/templates/statefulset.yaml @@ -65,7 +65,6 @@ spec: containers: - name: {{ .Values.containerName }} securityContext: - allowPrivilegeEscalation: false {{- toYaml .Values.securityContext | nindent 12 }} image: "{{ .Values.image.registry }}/{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" imagePullPolicy: {{ .Values.image.pullPolicy }} diff --git a/deploy/helm/values.yaml b/deploy/helm/values.yaml index 06fad20cbe..1c54837c07 100644 --- a/deploy/helm/values.yaml +++ b/deploy/helm/values.yaml @@ -98,13 +98,14 @@ podAnnotations: {} podLabels: {} podSecurityContext: {} - # fsGroup: 2000 +# For non-root user +# fsGroup: 1001 +# sysctls: +# - name: net.ipv4.ip_unprivileged_port_start +# value: "80" securityContext: {} - # capabilities: - # drop: - # - ALL - # readOnlyRootFilesystem: true + # For non-root user # runAsNonRoot: true # runAsUser: 1000