evan.jarrett.net
Kubernetes Operator for Tangled Spindles
fix init container
+2
-1
+2
-1
internal/jobbuilder/job_template.go
+2
-1
internal/jobbuilder/job_template.go
···
230
230
AllowPrivilegeEscalation: &[]bool{false}[0],
231
231
// Note: This init container runs as root to create the passwd/group files
232
232
// All subsequent containers run as UID 1000 (non-root)
233
-
RunAsUser: &[]int64{0}[0],
233
+
RunAsNonRoot: &[]bool{false}[0],
234
+
RunAsUser: &[]int64{0}[0],
234
235
Capabilities: &corev1.Capabilities{
235
236
Drop: []corev1.Capability{"ALL"},
236
237
},