Skip to content

Commit

Permalink
Remove controller-manager uid and gid settings
Browse files Browse the repository at this point in the history
- Current uid/gid settings for the controller manager break on more security conscious
  kubernetes distros where uid/gid is generated off of a random uid range that might
  require uid/gid to be > 65000
  • Loading branch information
redhatrises committed Mar 10, 2022
1 parent 8adf9a1 commit 6758072
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 7 deletions.
3 changes: 0 additions & 3 deletions bundle/manifests/falcon-operator.clusterserviceversion.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -433,10 +433,7 @@ spec:
- ALL
privileged: false
securityContext:
fsGroup: 65532
runAsGroup: 65532
runAsNonRoot: true
runAsUser: 65532
serviceAccountName: falcon-operator-controller-manager
terminationGracePeriodSeconds: 10
permissions:
Expand Down
4 changes: 0 additions & 4 deletions config/manager/manager.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -26,10 +26,6 @@ spec:
spec:
securityContext:
runAsNonRoot: true
runAsGroup: 65532
runAsUser: 65532
fsGroup: 65532
runAsNonRoot: true
containers:
- command:
- /manager
Expand Down

0 comments on commit 6758072

Please sign in to comment.