diff --git a/charts/superset/templates/beat/deployment.yaml b/charts/superset/templates/beat/deployment.yaml index a7cea6dc..2408a427 100644 --- a/charts/superset/templates/beat/deployment.yaml +++ b/charts/superset/templates/beat/deployment.yaml @@ -25,7 +25,8 @@ spec: release: {{ .Release.Name }} spec: securityContext: - runAsUser: 0 + runAsNonRoot: true + runAsUser: 1000 initContainers: - name: wait-for-postgres-redis image: apache/superset:dockerize diff --git a/charts/superset/templates/flower/deployment.yaml b/charts/superset/templates/flower/deployment.yaml index eb643182..9c4fe7f5 100644 --- a/charts/superset/templates/flower/deployment.yaml +++ b/charts/superset/templates/flower/deployment.yaml @@ -22,7 +22,8 @@ spec: release: {{ .Release.Name }} spec: securityContext: - runAsUser: 0 + runAsNonRoot: true + runAsUser: 1000 initContainers: - name: wait-for-postgres-redis image: apache/superset:dockerize diff --git a/charts/superset/templates/init-job.yaml b/charts/superset/templates/init-job.yaml index 01cfecb2..c628c171 100644 --- a/charts/superset/templates/init-job.yaml +++ b/charts/superset/templates/init-job.yaml @@ -16,7 +16,8 @@ spec: name: {{ template "superset.fullname" . }}-init-db spec: securityContext: - runAsUser: 0 + runAsNonRoot: true + runAsUser: 1000 initContainers: - name: wait-for-postgres image: apache/superset:dockerize diff --git a/charts/superset/templates/node/deployment.yaml b/charts/superset/templates/node/deployment.yaml index 11036519..6cce4f5d 100644 --- a/charts/superset/templates/node/deployment.yaml +++ b/charts/superset/templates/node/deployment.yaml @@ -24,7 +24,8 @@ spec: release: {{ .Release.Name }} spec: securityContext: - runAsUser: 0 + runAsNonRoot: true + runAsUser: 1000 initContainers: - name: wait-for-postgres image: apache/superset:dockerize diff --git a/charts/superset/templates/worker/deployment.yaml b/charts/superset/templates/worker/deployment.yaml index ab8f63d1..98750263 100644 --- a/charts/superset/templates/worker/deployment.yaml +++ b/charts/superset/templates/worker/deployment.yaml @@ -23,7 +23,8 @@ spec: release: {{ .Release.Name }} spec: securityContext: - runAsUser: 0 + runAsNonRoot: true + runAsUser: 1000 initContainers: - name: wait-for-postgres-redis image: apache/superset:dockerize