flux-get-started
flux-get-started copied to clipboard
Fix error breaking non-root policy mongodb
Hi,
i've spotted the "Error: container's runAsUser breaks non-root policy" in my events and traced it down to, the securityContext runAsUser/fsGroup.
The chart defaults (https://github.com/helm/charts/blob/e1b97b9232d7273127f53c7899d2377d5912f267/stable/mongodb/values-production.yaml#L113) already specify runAsUser and fsGroup 1001 and mongodb starts successfully with this configuration. A bit strange tho' because there is no UID/GID defined 1001 in the container.
I found the same issue. Though I wonder whether this is here on purpose to show the GitOps workflow of fixing it, pushing and seeing the cluster correct itself.