Drop uid and guid in 3scale-kourier-gateway (#127)

openshift-knative · Mar 1, 2024 · f20d9c6 · f20d9c6
1 parent 8a981e6
commit f20d9c6
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 4 deletions.
diff --git a/config/300-gateway.yaml b/config/300-gateway.yaml
@@ -72,8 +72,6 @@ spec:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: false
             runAsNonRoot: true
-            runAsUser: 65534
-            runAsGroup: 65534
             capabilities:
               drop:
                 - ALL

diff --git a/openshift/patches/003-dropuid.patch b/openshift/patches/003-dropuid.patch
@@ -0,0 +1,13 @@
+diff --git a/config/300-gateway.yaml b/config/300-gateway.yaml
+index 4a71d3eb..6c9df8f9 100644
+--- a/config/300-gateway.yaml
++++ b/config/300-gateway.yaml
+@@ -72,8 +72,6 @@ spec:
+             allowPrivilegeEscalation: false
+             readOnlyRootFilesystem: false
+             runAsNonRoot: true
+-            runAsUser: 65534
+-            runAsGroup: 65534
+             capabilities:
+               drop:
+                 - ALL
diff --git a/openshift/release/artifacts/net-kourier.yaml b/openshift/release/artifacts/net-kourier.yaml
@@ -486,8 +486,6 @@ spec:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: false
             runAsNonRoot: true
-            runAsUser: 65534
-            runAsGroup: 65534
             capabilities:
               drop:
                 - ALL