manifests: drop privileges for gateways by default (#23379)

rh-bjeon · Apr 29, 2020 · 4c54ae1 · 4c54ae1
1 parent 0f5a5f0
commit 4c54ae1
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/manifests/charts/gateways/istio-egress/values.yaml b/manifests/charts/gateways/istio-egress/values.yaml
@@ -105,7 +105,7 @@ gateways:
     podAntiAffinityTermLabelSelector: []
 
     # whether to run the gateway in a privileged container
-    runAsRoot: true
+    runAsRoot: false
 
 # Revision is set as 'version' label and part of the resource names when installing multiple control planes.
 revision: ""
diff --git a/manifests/charts/gateways/istio-ingress/values.yaml b/manifests/charts/gateways/istio-ingress/values.yaml
@@ -134,7 +134,7 @@ gateways:
     podAntiAffinityTermLabelSelector: []
 
     # whether to run the gateway in a privileged container
-    runAsRoot: true
+    runAsRoot: false
 
 # Revision is set as 'version' label and part of the resource names when installing multiple control planes.
 revision: ""