Merge pull request #5494 from janosi/wh_runasuser

Add configuration option for the runAsUser parameter of the webhook patch job
kubernetes · May 4, 2020 · 4b62da8 · 4b62da8
2 parents 45698ca + 5148443
commit 4b62da8
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 3 deletions.
diff --git a/charts/ingress-nginx/templates/admission-webhooks/job-patch/job-createSecret.yaml b/charts/ingress-nginx/templates/admission-webhooks/job-patch/job-createSecret.yaml
@@ -46,5 +46,5 @@ spec:
     {{- end }}
       securityContext:
         runAsNonRoot: true
-        runAsUser: 2000
+        runAsUser: {{ .Values.controller.admissionWebhooks.patch.runAsUser }}
 {{- end }}
diff --git a/charts/ingress-nginx/templates/admission-webhooks/job-patch/job-patchWebhook.yaml b/charts/ingress-nginx/templates/admission-webhooks/job-patch/job-patchWebhook.yaml
@@ -48,5 +48,5 @@ spec:
     {{- end }}
       securityContext:
         runAsNonRoot: true
-        runAsUser: 2000
-{{- end }}
+        runAsUser: {{ .Values.controller.admissionWebhooks.patch.runAsUser }}
+{{- end }}
diff --git a/charts/ingress-nginx/values.yaml b/charts/ingress-nginx/values.yaml
@@ -367,6 +367,7 @@ controller:
       priorityClassName: ""
       podAnnotations: {}
       nodeSelector: {}
+      runAsUser: 2000
 
   metrics:
     port: 10254