Consolidate UID and GID
This commit is contained in:
@@ -154,7 +154,7 @@ spec:
|
|||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 2001
|
runAsGroup: 1001
|
||||||
- name: dnsmasq
|
- name: dnsmasq
|
||||||
image: k8s.gcr.io/k8s-dns-dnsmasq-nanny:1.14.13
|
image: k8s.gcr.io/k8s-dns-dnsmasq-nanny:1.14.13
|
||||||
livenessProbe:
|
livenessProbe:
|
||||||
@@ -231,6 +231,6 @@ spec:
|
|||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 2001
|
runAsGroup: 1001
|
||||||
dnsPolicy: Default # Don't use cluster DNS.
|
dnsPolicy: Default # Don't use cluster DNS.
|
||||||
serviceAccountName: kube-dns
|
serviceAccountName: kube-dns
|
||||||
|
@@ -154,7 +154,7 @@ spec:
|
|||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 2001
|
runAsGroup: 1001
|
||||||
- name: dnsmasq
|
- name: dnsmasq
|
||||||
image: k8s.gcr.io/k8s-dns-dnsmasq-nanny:1.14.13
|
image: k8s.gcr.io/k8s-dns-dnsmasq-nanny:1.14.13
|
||||||
livenessProbe:
|
livenessProbe:
|
||||||
@@ -231,6 +231,6 @@ spec:
|
|||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 2001
|
runAsGroup: 1001
|
||||||
dnsPolicy: Default # Don't use cluster DNS.
|
dnsPolicy: Default # Don't use cluster DNS.
|
||||||
serviceAccountName: kube-dns
|
serviceAccountName: kube-dns
|
||||||
|
@@ -154,7 +154,7 @@ spec:
|
|||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 2001
|
runAsGroup: 1001
|
||||||
- name: dnsmasq
|
- name: dnsmasq
|
||||||
image: k8s.gcr.io/k8s-dns-dnsmasq-nanny:1.14.13
|
image: k8s.gcr.io/k8s-dns-dnsmasq-nanny:1.14.13
|
||||||
livenessProbe:
|
livenessProbe:
|
||||||
@@ -231,6 +231,6 @@ spec:
|
|||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 2001
|
runAsGroup: 1001
|
||||||
dnsPolicy: Default # Don't use cluster DNS.
|
dnsPolicy: Default # Don't use cluster DNS.
|
||||||
serviceAccountName: kube-dns
|
serviceAccountName: kube-dns
|
||||||
|
Reference in New Issue
Block a user