permit root so our new image that adjusts oom score can still boot

jphenow · jphenow · commit 545dd3ad9372 · 2025-05-21T15:57:57.000-05:00
diff --git a/internal/initialize/security.go b/internal/initialize/security.go
@@ -39,7 +39,7 @@ func RestrictedSecurityContext(enableSeccompProfile bool) *corev1.SecurityContex
 		ReadOnlyRootFilesystem: Bool(true),
 
 		// Fail to start the container if its image runs as UID 0 (root).
-		RunAsNonRoot: Bool(true),
+		RunAsNonRoot: Bool(false),
 	}
 
 	if enableSeccompProfile {

Original file line number	Diff line number	Diff line change
`@@ -39,7 +39,7 @@ func RestrictedSecurityContext(enableSeccompProfile bool) *corev1.SecurityContex`
`39`	`39`	`ReadOnlyRootFilesystem: Bool(true),`
`40`	`40`
`41`	`41`	`// Fail to start the container if its image runs as UID 0 (root).`
`42`		`- RunAsNonRoot: Bool(true),`
	`42`	`+ RunAsNonRoot: Bool(false),`
`43`	`43`	`}`
`44`	`44`
`45`	`45`	`if enableSeccompProfile {`