Add basic security context to deployment YAMLs

2018-04-28 23:32:37 +02:00 · 2018-04-28 23:32:37 +02:00 · cbb0f96f74
commit cbb0f96f74
parent 69fce01325
7 changed files with 14 additions and 0 deletions
--- a/deploy/provider/patch-service-with-rbac.yaml
+++ b/deploy/provider/patch-service-with-rbac.yaml
@ -61,3 +61,5 @@ spec:
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
+          securityContext:
+            runAsNonRoot: false
--- a/deploy/provider/patch-service-without-rbac.yaml
+++ b/deploy/provider/patch-service-without-rbac.yaml
@ -60,3 +60,5 @@ spec:
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
+          securityContext:
+            runAsNonRoot: false
--- a/deploy/with-rbac.yaml
+++ b/deploy/with-rbac.yaml
@ -60,3 +60,5 @@ spec:
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
+          securityContext:
+            runAsNonRoot: false
--- a/deploy/without-rbac.yaml
+++ b/deploy/without-rbac.yaml
@ -59,3 +59,5 @@ spec:
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
+          securityContext:
+            runAsNonRoot: false
--- a/docs/examples/customization/custom-errors/rc-custom-errors.yaml
+++ b/docs/examples/customization/custom-errors/rc-custom-errors.yaml
@ -49,3 +49,5 @@ spec:
        args:
        - /nginx-ingress-controller
        - --default-backend-service=$(POD_NAMESPACE)/nginx-errors
+        securityContext:
+          runAsNonRoot: false
--- a/docs/examples/static-ip/nginx-ingress-controller.yaml
+++ b/docs/examples/static-ip/nginx-ingress-controller.yaml
@ -53,3 +53,5 @@ spec:
        - /nginx-ingress-controller
        - --default-backend-service=$(POD_NAMESPACE)/default-http-backend
        - --publish-service=$(POD_NAMESPACE)/nginx-ingress-lb
+        securityContext:
+          runAsNonRoot: false
--- a/test/manifests/ingress-controller/with-rbac.yaml
+++ b/test/manifests/ingress-controller/with-rbac.yaml
@ -58,3 +58,5 @@ spec:
            periodSeconds: 10
            successThreshold: 1
            timeoutSeconds: 1
+          securityContext:
+            runAsNonRoot: false