Add security context to seldon-controller-manager deployment

SeldonIO · Dec 3, 2020 · 91d090c · 91d090c
1 parent d352fa9
commit 91d090c
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 0 deletions.
diff --git a/helm-charts/seldon-core-operator/templates/deployment_seldon-controller-manager.yaml b/helm-charts/seldon-core-operator/templates/deployment_seldon-controller-manager.yaml
@@ -162,6 +162,8 @@ spec:
           name: cert
           readOnly: true
 {{- end }}
+      securityContext:
+        runAsUser: '{{ .Values.defaultUserID }}'
       serviceAccountName: '{{ .Values.serviceAccount.name }}'
       terminationGracePeriodSeconds: 10
 {{- if not .Values.managerCreateResources }}

diff --git a/operator/config/manager/manager.yaml b/operator/config/manager/manager.yaml
@@ -25,6 +25,8 @@ spec:
         control-plane: seldon-controller-manager
     spec:
       serviceAccountName: manager
+      securityContext:
+        runAsUser: 8888
       containers:
       - command:
         - /manager

diff --git a/operator/helm/split_resources.py b/operator/helm/split_resources.py
@@ -154,6 +154,11 @@ def helm_release(value: str):
                 res["spec"]["template"]["spec"]["serviceAccountName"] = helm_value(
                     "serviceAccount.name"
                 )
+
+                # SecurityContext
+                res["spec"]["template"]["spec"]["securityContext"]["runAsUser"] = helm_value(
+                    "defaultUserID"
+                )
 
                 # Resource requests
                 res["spec"]["template"]["spec"]["containers"][0]["resources"][