From 621cdc7c6d58d04938cde6a738aa4a15977cf4bf Mon Sep 17 00:00:00 2001
From: "Chang, Hui-Tang" <huitang.chang@instill.tech>
Date: Tue, 30 Jul 2024 05:19:34 +0800
Subject: [PATCH] fix(helm): fix pipeline pod permission (#1053)

Because

- The pipeline pod security settings are incorrect.

This commit

- Fixes the pipeline pod permissions.
---
 charts/core/templates/pipeline-backend/deployment.yaml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/charts/core/templates/pipeline-backend/deployment.yaml b/charts/core/templates/pipeline-backend/deployment.yaml
index ab94f5ab..16c4325a 100644
--- a/charts/core/templates/pipeline-backend/deployment.yaml
+++ b/charts/core/templates/pipeline-backend/deployment.yaml
@@ -38,10 +38,9 @@ spec:
         {{- toYaml . | nindent 8 }}
         {{- end }}
     spec:
-      # Distroless nonroot:nonroot is 65532:65532
       securityContext:
-        runAsUser: 65532
-        runAsGroup: 65532
+        runAsUser: 65534
+        runAsGroup: 65534
       {{- if .Values.pipelineBackend.serviceAccountName }}
       serviceAccountName: {{ .Values.pipelineBackend.serviceAccountName }}
       {{- end }}