Merge pull request #76 from projectsyn/fix/update-coredns-template

simu · web-flow · commit 549b9a7f586e · 2024-04-12T09:43:43.000+02:00
Update CoreDNS template to match upstream template
diff --git a/component/coredns.libsonnet b/component/coredns.libsonnet
@@ -159,8 +159,9 @@ local corednsConfigMap =
                         name: metrics
                         protocol: TCP
                     securityContext:
+                      runAsNonRoot: true
                       runAsUser: {{.RUN_AS_USER}}
-                      runAsNonRoot: {{.RUN_AS_NON_ROOT}}
+                      runAsGroup: {{.RUN_AS_GROUP}}
                       allowPrivilegeEscalation: false
                       capabilities:
                         drop:
diff --git a/tests/golden/defaults/defaults/defaults/10_cluster.yaml b/tests/golden/defaults/defaults/defaults/10_cluster.yaml
@@ -439,8 +439,9 @@ data:
                   name: metrics
                   protocol: TCP
               securityContext:
+                runAsNonRoot: true
                 runAsUser: {{.RUN_AS_USER}}
-                runAsNonRoot: {{.RUN_AS_NON_ROOT}}
+                runAsGroup: {{.RUN_AS_GROUP}}
                 allowPrivilegeEscalation: false
                 capabilities:
                   drop:
diff --git a/tests/golden/oidc/oidc/oidc/10_cluster.yaml b/tests/golden/oidc/oidc/oidc/10_cluster.yaml
@@ -446,8 +446,9 @@ data:
                   name: metrics
                   protocol: TCP
               securityContext:
+                runAsNonRoot: true
                 runAsUser: {{.RUN_AS_USER}}
-                runAsNonRoot: {{.RUN_AS_NON_ROOT}}
+                runAsGroup: {{.RUN_AS_GROUP}}
                 allowPrivilegeEscalation: false
                 capabilities:
                   drop:
diff --git a/tests/golden/openshift/openshift/openshift/10_cluster.yaml b/tests/golden/openshift/openshift/openshift/10_cluster.yaml
@@ -482,8 +482,9 @@ data:
                   name: metrics
                   protocol: TCP
               securityContext:
+                runAsNonRoot: true
                 runAsUser: {{.RUN_AS_USER}}
-                runAsNonRoot: {{.RUN_AS_NON_ROOT}}
+                runAsGroup: {{.RUN_AS_GROUP}}
                 allowPrivilegeEscalation: false
                 capabilities:
                   drop:
