Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 6 Packages Projects Releases Wiki Activity

Check if runAsUser and/or runAsGroup are not supplied in In Fleet Helm Chart Values (#29588)

Browse Source 
Add logic around runAsUser and runAsGroup to Fleet Helm Chart
- Resolves #29460 
- Added to deployment, migration, and cronjob for vulnprocessing.
This commit is contained in:
Jorge Falcon
2025-05-29 14:32:30 -04:00
committed by GitHub
parent d3392873d8
commit 96cb81666a
4 changed files with 25 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/fleet/Chart.yaml
+1 -1
View File
@@ -4,7 +4,7 @@ name: fleet
keywords:
- fleet
- osquery
version: v6.6.2
version: v6.6.3
home: https://github.com/fleetdm/fleet
sources:
- https://github.com/fleetdm/fleet.git
charts/fleet/templates/cron-vulnprocessing.yaml
+8
View File
@@ -168,8 +168,12 @@ spec:
{{- end }}
privileged: false
readOnlyRootFilesystem: true
{{- if .Values.fleet.securityContext.runAsGroup }}
runAsGroup: {{ int64 .Values.fleet.securityContext.runAsGroup }}
{{- end }}
{{- if .Values.fleet.securityContext.runAsUser }}
runAsUser: {{ int64 .Values.fleet.securityContext.runAsUser }}
{{- end }}
runAsNonRoot: true
volumeMounts:
- name: tmp
@@ -199,8 +203,12 @@ spec:
drop: [ALL]
privileged: false
readOnlyRootFilesystem: true
{{- if .Values.fleet.securityContext.runAsGroup }}
runAsGroup: {{ int64 .Values.fleet.securityContext.runAsGroup }}
{{- end }}
{{- if .Values.fleet.securityContext.runAsUser }}
runAsUser: {{ int64 .Values.fleet.securityContext.runAsUser }}
{{- end }}
runAsNonRoot: true
{{- end }}
{{- with .Values.imagePullSecrets }}
charts/fleet/templates/deployment.yaml
+8
View File
@@ -304,8 +304,12 @@ spec:
drop: [ALL]
privileged: false
readOnlyRootFilesystem: true
{{- if .Values.fleet.securityContext.runAsGroup }}
runAsGroup: {{ int64 .Values.fleet.securityContext.runAsGroup }}
{{- end }}
{{- if .Values.fleet.securityContext.runAsUser }}
runAsUser: {{ int64 .Values.fleet.securityContext.runAsUser }}
{{- end }}
runAsNonRoot: true
livenessProbe:
httpGet:
@@ -363,8 +367,12 @@ spec:
drop: [ALL]
privileged: false
readOnlyRootFilesystem: true
{{- if .Values.fleet.securityContext.runAsGroup }}
runAsGroup: {{ int64 .Values.fleet.securityContext.runAsGroup }}
{{- end }}
{{- if .Values.fleet.securityContext.runAsUser }}
runAsUser: {{ int64 .Values.fleet.securityContext.runAsUser }}
{{- end }}
runAsNonRoot: true
{{- end }}
hostPID: false
charts/fleet/templates/job-migration.yaml
+8
View File
@@ -131,8 +131,12 @@ spec:
{{- end }}
privileged: false
readOnlyRootFilesystem: true
{{- if .Values.fleet.securityContext.runAsGroup }}
runAsGroup: {{ int64 .Values.fleet.securityContext.runAsGroup }}
{{- end }}
{{- if .Values.fleet.securityContext.runAsUser }}
runAsUser: {{ int64 .Values.fleet.securityContext.runAsUser }}
{{- end }}
runAsNonRoot: true
volumeMounts:
{{- if .Values.database.tls.enabled }}
@@ -160,8 +164,12 @@ spec:
drop: [ALL]
privileged: false
readOnlyRootFilesystem: true
{{- if .Values.fleet.securityContext.runAsGroup }}
runAsGroup: {{ int64 .Values.fleet.securityContext.runAsGroup }}
{{- end }}
{{- if .Values.fleet.securityContext.runAsUser }}
runAsUser: {{ int64 .Values.fleet.securityContext.runAsUser }}
{{- end }}
runAsNonRoot: true
{{- end }}
{{- with .Values.imagePullSecrets }}