Skip to content

Commit 5db8c02

Browse files
authored
fix: set runAsNonRoot to false for wait-for-dependencies init container (#243)
1 parent 04be4e6 commit 5db8c02

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

helm/trusted-workload/charts/cc-runtimeclass/templates/cc-runtimeclass-deployment.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ spec:
2828
done &&
2929
echo "CRD found, upgrading parent-chart with cc-runtimeclass enabled"
3030
securityContext:
31-
runAsNonRoot: true
31+
runAsNonRoot: false
3232
readOnlyRootFilesystem: true
3333
allowPrivilegeEscalation: false
3434
seccompProfile:

helm/trusted-workload/charts/cc-runtimeclass/tests/cc-runtimeclass-deployment_test.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -52,7 +52,7 @@ tests:
5252
echo "CRD found, upgrading parent-chart with cc-runtimeclass enabled"
5353
- equal:
5454
path: spec.template.spec.initContainers[0].securityContext.runAsNonRoot
55-
value: true
55+
value: false
5656
- equal:
5757
path: spec.template.spec.initContainers[0].securityContext.readOnlyRootFilesystem
5858
value: true

0 commit comments

Comments
 (0)