From 4a4ad5b5547320724ba4414c6e06e2b5f621f0fe Mon Sep 17 00:00:00 2001
From: gourish25 <gourish.hegde@zop.dev>
Date: Tue, 10 Mar 2026 12:32:02 +0530
Subject: [PATCH] Fix : Run superset containers as non-root

---
 charts/superset/templates/beat/deployment.yaml   | 3 ++-
 charts/superset/templates/flower/deployment.yaml | 3 ++-
 charts/superset/templates/init-job.yaml          | 3 ++-
 charts/superset/templates/node/deployment.yaml   | 3 ++-
 charts/superset/templates/worker/deployment.yaml | 3 ++-
 5 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/charts/superset/templates/beat/deployment.yaml b/charts/superset/templates/beat/deployment.yaml
index a7cea6dc..2408a427 100644
--- a/charts/superset/templates/beat/deployment.yaml
+++ b/charts/superset/templates/beat/deployment.yaml
@@ -25,7 +25,8 @@ spec:
         release: {{ .Release.Name }}
     spec:
       securityContext:
-        runAsUser: 0
+        runAsNonRoot: true
+        runAsUser: 1000
       initContainers:
         - name: wait-for-postgres-redis
           image: apache/superset:dockerize
diff --git a/charts/superset/templates/flower/deployment.yaml b/charts/superset/templates/flower/deployment.yaml
index eb643182..9c4fe7f5 100644
--- a/charts/superset/templates/flower/deployment.yaml
+++ b/charts/superset/templates/flower/deployment.yaml
@@ -22,7 +22,8 @@ spec:
         release: {{ .Release.Name }}
     spec:
       securityContext:
-        runAsUser: 0
+        runAsNonRoot: true
+        runAsUser: 1000
       initContainers:
         - name: wait-for-postgres-redis
           image: apache/superset:dockerize
diff --git a/charts/superset/templates/init-job.yaml b/charts/superset/templates/init-job.yaml
index 01cfecb2..c628c171 100644
--- a/charts/superset/templates/init-job.yaml
+++ b/charts/superset/templates/init-job.yaml
@@ -16,7 +16,8 @@ spec:
       name: {{ template "superset.fullname" . }}-init-db
     spec:
       securityContext:
-        runAsUser: 0
+        runAsNonRoot: true
+        runAsUser: 1000
       initContainers:
         - name: wait-for-postgres
           image: apache/superset:dockerize
diff --git a/charts/superset/templates/node/deployment.yaml b/charts/superset/templates/node/deployment.yaml
index 11036519..6cce4f5d 100644
--- a/charts/superset/templates/node/deployment.yaml
+++ b/charts/superset/templates/node/deployment.yaml
@@ -24,7 +24,8 @@ spec:
         release: {{ .Release.Name }}
     spec:
       securityContext:
-        runAsUser: 0
+        runAsNonRoot: true
+        runAsUser: 1000
       initContainers:
         - name: wait-for-postgres
           image: apache/superset:dockerize
diff --git a/charts/superset/templates/worker/deployment.yaml b/charts/superset/templates/worker/deployment.yaml
index ab8f63d1..98750263 100644
--- a/charts/superset/templates/worker/deployment.yaml
+++ b/charts/superset/templates/worker/deployment.yaml
@@ -23,7 +23,8 @@ spec:
         release: {{ .Release.Name }}
     spec:
       securityContext:
-        runAsUser: 0
+        runAsNonRoot: true
+        runAsUser: 1000
       initContainers:
         - name: wait-for-postgres-redis
           image: apache/superset:dockerize