Skip to content

Commit 4148c32

Browse files
authored
Mysql-restic template to aligned with changed pod security on OCP-4.12 (#1122) (#1124)
* Mysql restic e2e test failure on ocp4.12 * GID 27 is not allowed
1 parent 6ab3ba8 commit 4148c32

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

tests/e2e/sample-applications/mysql-persistent/mysql-persistent.yaml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -85,19 +85,19 @@ items:
8585
app: mysql
8686
spec:
8787
securityContext:
88-
runAsGroup: 27
89-
runAsUser: 27
90-
fsGroup: 27
91-
privileged: true
88+
runAsNonRoot: true
9289
serviceAccountName: mysql-persistent-sa
9390
containers:
9491
- image: registry.redhat.io/rhel8/mariadb-105:latest
9592
name: mysql
9693
securityContext:
97-
runAsGroup: 27
98-
runAsUser: 27
99-
fsGroup: 27
10094
privileged: false
95+
allowPrivilegeEscalation: false
96+
capabilities:
97+
drop:
98+
- ALL
99+
seccompProfile:
100+
type: RuntimeDefault
101101
env:
102102
- name: MYSQL_USER
103103
value: changeme

0 commit comments

Comments
 (0)