feat(rabbitmq): enable pod and container security context with updated user and group IDs

Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-02-22 05:15:16 +08:00 · 2025-02-22 05:15:16 +08:00 · 4f5c7307fd
commit 4f5c7307fd
parent 8967828a20
1 changed files with 6 additions and 6 deletions
--- a/freeleaps/helm-pkg/3rd/rabbitmq/values.alpha.yaml
+++ b/freeleaps/helm-pkg/3rd/rabbitmq/values.alpha.yaml
@ -182,18 +182,18 @@ replicaCount: 3
 updateStrategy:
  type: RollingUpdate
 podSecurityContext:
-  enabled: false
+  enabled: true
  fsGroupChangePolicy: Always
  sysctls: []
  supplementalGroups: []
-  fsGroup: 1001
+  fsGroup: 1000
 containerSecurityContext:
-  enabled: false
+  enabled: true
  seLinuxOptions: {}
-  runAsUser: 1001
-  runAsGroup: 1001
+  runAsUser: 1000
+  runAsGroup: 1000
  runAsNonRoot: true
-  allowPrivilegeEscalation: true
+  allowPrivilegeEscalation: false
  readOnlyRootFilesystem: true
  capabilities:
    drop: ["ALL"]