mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-03 17:30:00 +00:00
Consolidate UID and GID
This commit is contained in:
parent
2545cbafd9
commit
66a852071a
@ -154,7 +154,7 @@ spec:
|
|||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 2001
|
runAsGroup: 1001
|
||||||
- name: dnsmasq
|
- name: dnsmasq
|
||||||
image: k8s.gcr.io/k8s-dns-dnsmasq-nanny:1.14.13
|
image: k8s.gcr.io/k8s-dns-dnsmasq-nanny:1.14.13
|
||||||
livenessProbe:
|
livenessProbe:
|
||||||
@ -231,6 +231,6 @@ spec:
|
|||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 2001
|
runAsGroup: 1001
|
||||||
dnsPolicy: Default # Don't use cluster DNS.
|
dnsPolicy: Default # Don't use cluster DNS.
|
||||||
serviceAccountName: kube-dns
|
serviceAccountName: kube-dns
|
||||||
|
@ -154,7 +154,7 @@ spec:
|
|||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 2001
|
runAsGroup: 1001
|
||||||
- name: dnsmasq
|
- name: dnsmasq
|
||||||
image: k8s.gcr.io/k8s-dns-dnsmasq-nanny:1.14.13
|
image: k8s.gcr.io/k8s-dns-dnsmasq-nanny:1.14.13
|
||||||
livenessProbe:
|
livenessProbe:
|
||||||
@ -231,6 +231,6 @@ spec:
|
|||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 2001
|
runAsGroup: 1001
|
||||||
dnsPolicy: Default # Don't use cluster DNS.
|
dnsPolicy: Default # Don't use cluster DNS.
|
||||||
serviceAccountName: kube-dns
|
serviceAccountName: kube-dns
|
||||||
|
@ -154,7 +154,7 @@ spec:
|
|||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 2001
|
runAsGroup: 1001
|
||||||
- name: dnsmasq
|
- name: dnsmasq
|
||||||
image: k8s.gcr.io/k8s-dns-dnsmasq-nanny:1.14.13
|
image: k8s.gcr.io/k8s-dns-dnsmasq-nanny:1.14.13
|
||||||
livenessProbe:
|
livenessProbe:
|
||||||
@ -231,6 +231,6 @@ spec:
|
|||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: true
|
||||||
runAsUser: 1001
|
runAsUser: 1001
|
||||||
runAsGroup: 2001
|
runAsGroup: 1001
|
||||||
dnsPolicy: Default # Don't use cluster DNS.
|
dnsPolicy: Default # Don't use cluster DNS.
|
||||||
serviceAccountName: kube-dns
|
serviceAccountName: kube-dns
|
||||||
|
Loading…
Reference in New Issue
Block a user