From 9e3677e58a6a44dfcb12ec4aa021e171f6e06199 Mon Sep 17 00:00:00 2001 From: Reto Lehmann Date: Tue, 5 Mar 2024 12:55:37 +0100 Subject: [PATCH] Drop uid and guid in 3scale-kourier-gateway --- openshift/patches/003-dropuid.patch | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 openshift/patches/003-dropuid.patch diff --git a/openshift/patches/003-dropuid.patch b/openshift/patches/003-dropuid.patch new file mode 100644 index 000000000..5b7d331f6 --- /dev/null +++ b/openshift/patches/003-dropuid.patch @@ -0,0 +1,13 @@ +diff --git a/config/300-gateway.yaml b/config/300-gateway.yaml +index 4a71d3eb..6c9df8f9 100644 +--- a/config/300-gateway.yaml ++++ b/config/300-gateway.yaml +@@ -72,8 +72,6 @@ spec: + allowPrivilegeEscalation: false + readOnlyRootFilesystem: false + runAsNonRoot: true +- runAsUser: 65534 +- runAsGroup: 65534 + capabilities: + drop: + - ALL