Skip to content

Commit ea2d8fd

Browse files
butler54claude
andcommitted
fix: remove fixed runAsUser from hello-openshift Deployments
Bare Pods ran under kube:admin with anyuid SCC, but Deployment-created pods use the default ServiceAccount which only has restricted-v2 SCC. Remove the fixed runAsUser: 1001 and let OpenShift assign a UID from the namespace range. runAsNonRoot: true ensures non-root execution. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent e0b936e commit ea2d8fd

3 files changed

Lines changed: 0 additions & 3 deletions

File tree

charts/coco-supported/hello-openshift/templates/insecure-policy-deployment.yaml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,6 @@ spec:
2626
privileged: false
2727
allowPrivilegeEscalation: false
2828
runAsNonRoot: true
29-
runAsUser: 1001
3029
capabilities:
3130
drop:
3231
- ALL

charts/coco-supported/hello-openshift/templates/secure-deployment.yaml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,6 @@ spec:
2727
privileged: false
2828
allowPrivilegeEscalation: false
2929
runAsNonRoot: true
30-
runAsUser: 1001
3130
capabilities:
3231
drop:
3332
- ALL

charts/coco-supported/hello-openshift/templates/standard-deployment.yaml

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,6 @@ spec:
2323
privileged: false
2424
allowPrivilegeEscalation: false
2525
runAsNonRoot: true
26-
runAsUser: 1001
2726
capabilities:
2827
drop:
2928
- ALL

0 commit comments

Comments
 (0)