Merge pull request #76 from projectsyn/fix/update-coredns-template

Update CoreDNS template to match upstream template
projectsyn · Apr 12, 2024 · 549b9a7 · 549b9a7
2 parents c238827 + aa127fa
commit 549b9a7
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 4 deletions.
diff --git a/component/coredns.libsonnet b/component/coredns.libsonnet
@@ -159,8 +159,9 @@ local corednsConfigMap =
                         name: metrics
                         protocol: TCP
                     securityContext:
+                      runAsNonRoot: true
                       runAsUser: {{.RUN_AS_USER}}
-                      runAsNonRoot: {{.RUN_AS_NON_ROOT}}
+                      runAsGroup: {{.RUN_AS_GROUP}}
                       allowPrivilegeEscalation: false
                       capabilities:
                         drop:

diff --git a/tests/golden/defaults/defaults/defaults/10_cluster.yaml b/tests/golden/defaults/defaults/defaults/10_cluster.yaml
@@ -439,8 +439,9 @@ data:
                   name: metrics
                   protocol: TCP
               securityContext:
+                runAsNonRoot: true
                 runAsUser: {{.RUN_AS_USER}}
-                runAsNonRoot: {{.RUN_AS_NON_ROOT}}
+                runAsGroup: {{.RUN_AS_GROUP}}
                 allowPrivilegeEscalation: false
                 capabilities:
                   drop:

diff --git a/tests/golden/oidc/oidc/oidc/10_cluster.yaml b/tests/golden/oidc/oidc/oidc/10_cluster.yaml
@@ -446,8 +446,9 @@ data:
                   name: metrics
                   protocol: TCP
               securityContext:
+                runAsNonRoot: true
                 runAsUser: {{.RUN_AS_USER}}
-                runAsNonRoot: {{.RUN_AS_NON_ROOT}}
+                runAsGroup: {{.RUN_AS_GROUP}}
                 allowPrivilegeEscalation: false
                 capabilities:
                   drop:

diff --git a/tests/golden/openshift/openshift/openshift/10_cluster.yaml b/tests/golden/openshift/openshift/openshift/10_cluster.yaml
@@ -482,8 +482,9 @@ data:
                   name: metrics
                   protocol: TCP
               securityContext:
+                runAsNonRoot: true
                 runAsUser: {{.RUN_AS_USER}}
-                runAsNonRoot: {{.RUN_AS_NON_ROOT}}
+                runAsGroup: {{.RUN_AS_GROUP}}
                 allowPrivilegeEscalation: false
                 capabilities:
                   drop: