From 1c39cf236521cd134a29be05be8dcf936986dfda Mon Sep 17 00:00:00 2001 From: Vinayak Goyal Date: Wed, 30 Jun 2021 11:28:15 -0700 Subject: [PATCH] Fix incorrect user and group for kube-scheduler when it is running as non-root. --- cmd/kubeadm/app/util/staticpod/utils_linux.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/cmd/kubeadm/app/util/staticpod/utils_linux.go b/cmd/kubeadm/app/util/staticpod/utils_linux.go index 39e8039276c..255ce972416 100644 --- a/cmd/kubeadm/app/util/staticpod/utils_linux.go +++ b/cmd/kubeadm/app/util/staticpod/utils_linux.go @@ -58,8 +58,8 @@ func RunComponentAsNonRoot(componentName string, pod *v1.Pod, usersAndGroups *us case kubeadmconstants.KubeScheduler: return runKubeSchedulerAsNonRoot( pod, - usersAndGroups.Users.ID(kubeadmconstants.KubeControllerManagerUserName), - usersAndGroups.Groups.ID(kubeadmconstants.KubeControllerManagerUserName), + usersAndGroups.Users.ID(kubeadmconstants.KubeSchedulerUserName), + usersAndGroups.Groups.ID(kubeadmconstants.KubeSchedulerUserName), users.UpdatePathOwnerAndPermissions, ) case kubeadmconstants.Etcd: