Update CoreDNS template to match upstream template

simu · simu · commit aa127fa91dab · 2024-04-11T09:25:54.000+02:00
This commit updates the CoreDNS template managed by the component to match the template present in the vcluster v0.14.1 Helm chart. This should fix the sync issues we've observed recently. Fixes #75
diff --git a/component/coredns.libsonnet b/component/coredns.libsonnet
@@ -159,8 +159,9 @@ local corednsConfigMap =
                         name: metrics
                         protocol: TCP
                     securityContext:
+                      runAsNonRoot: true
                       runAsUser: {{.RUN_AS_USER}}
-                      runAsNonRoot: {{.RUN_AS_NON_ROOT}}
+                      runAsGroup: {{.RUN_AS_GROUP}}
                       allowPrivilegeEscalation: false
                       capabilities:
                         drop:
diff --git a/tests/golden/defaults/defaults/defaults/10_cluster.yaml b/tests/golden/defaults/defaults/defaults/10_cluster.yaml
@@ -439,8 +439,9 @@ data:
                   name: metrics
                   protocol: TCP
               securityContext:
+                runAsNonRoot: true
                 runAsUser: {{.RUN_AS_USER}}
-                runAsNonRoot: {{.RUN_AS_NON_ROOT}}
+                runAsGroup: {{.RUN_AS_GROUP}}
                 allowPrivilegeEscalation: false
                 capabilities:
                   drop:
diff --git a/tests/golden/oidc/oidc/oidc/10_cluster.yaml b/tests/golden/oidc/oidc/oidc/10_cluster.yaml
@@ -446,8 +446,9 @@ data:
                   name: metrics
                   protocol: TCP
               securityContext:
+                runAsNonRoot: true
                 runAsUser: {{.RUN_AS_USER}}
-                runAsNonRoot: {{.RUN_AS_NON_ROOT}}
+                runAsGroup: {{.RUN_AS_GROUP}}
                 allowPrivilegeEscalation: false
                 capabilities:
                   drop:
diff --git a/tests/golden/openshift/openshift/openshift/10_cluster.yaml b/tests/golden/openshift/openshift/openshift/10_cluster.yaml
@@ -482,8 +482,9 @@ data:
                   name: metrics
                   protocol: TCP
               securityContext:
+                runAsNonRoot: true
                 runAsUser: {{.RUN_AS_USER}}
-                runAsNonRoot: {{.RUN_AS_NON_ROOT}}
+                runAsGroup: {{.RUN_AS_GROUP}}
                 allowPrivilegeEscalation: false
                 capabilities:
                   drop:
