diff --git a/charts/logprep/values.yaml b/charts/logprep/values.yaml index 40decf559..5a68140b5 100644 --- a/charts/logprep/values.yaml +++ b/charts/logprep/values.yaml @@ -21,14 +21,14 @@ resources: # if enabled: the default security context for the pod podSecurityContext: enabled: true - fsgroup: 1000 - runAsNonRoot: true + fsGroup: 1000 runAsUser: 1000 - readOnlyRootFilesystem: true # if enabled: the default security context for the container containerSecruityContext: enabled: true + runAsNonRoot: true + readOnlyRootFilesystem: true capabilities: drop: - ALL diff --git a/tests/unit/charts/test_deployment.py b/tests/unit/charts/test_deployment.py index e004fff25..219b72618 100644 --- a/tests/unit/charts/test_deployment.py +++ b/tests/unit/charts/test_deployment.py @@ -80,7 +80,6 @@ def test_security_context(self): assert security_context["runAsUser"] == 1000 assert security_context["fsGroup"] == 1000 security_context = self.deployment["spec.template.spec.containers.0.securityContext"] - assert security_context["runAsUser"] == 1000 assert security_context["capabilities"]["drop"] == ["ALL"] assert security_context["readOnlyRootFilesystem"] is True assert security_context["runAsNonRoot"] is True