diff --git a/daemonjob-controller/templates/deployment.yaml b/daemonjob-controller/templates/deployment.yaml index 33eaf1001..177ed0f4c 100644 --- a/daemonjob-controller/templates/deployment.yaml +++ b/daemonjob-controller/templates/deployment.yaml @@ -47,6 +47,7 @@ spec: - name: controller {{ tuple $envAll "python" | include "helm-toolkit.snippets.image" | indent 8 }} {{ tuple $envAll $envAll.Values.pod.resources.daemonjob_controller | include "helm-toolkit.snippets.kubernetes_resources" | indent 8 }} +{{ dict "envAll" $envAll "application" "daemonjob_controller" "container" "controller" | include "helm-toolkit.snippets.kubernetes_container_security_context" | indent 8 }} command: - python - /hooks/sync.py diff --git a/daemonjob-controller/values.yaml b/daemonjob-controller/values.yaml index d644c5925..d07a3b961 100644 --- a/daemonjob-controller/values.yaml +++ b/daemonjob-controller/values.yaml @@ -65,9 +65,8 @@ pod: runAsNonRoot: true container: controller: - runAsUser: 34356 + runAsUser: 0 readOnlyRootFilesystem: true - endpoints: cluster_domain_suffix: cluster.local local_image_registry: