From f011f74e54ca297b0e9bb258d3cd0a22310df1b0 Mon Sep 17 00:00:00 2001
From: Mark Janssen <mark@praseodym.net>
Date: Sun, 29 Apr 2018 00:14:36 +0200
Subject: [PATCH] Add basic security context to Tiller pod template

---
 cmd/helm/installer/install.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/cmd/helm/installer/install.go b/cmd/helm/installer/install.go
index 0abd6774b..a670aebeb 100644
--- a/cmd/helm/installer/install.go
+++ b/cmd/helm/installer/install.go
@@ -225,6 +225,9 @@ func generateDeployment(opts *Options) (*v1beta1.Deployment, error) {
 								InitialDelaySeconds: 1,
 								TimeoutSeconds:      1,
 							},
+							SecurityContext: &v1.SecurityContext{
+								RunAsNonRoot: &[]bool{false}[0],
+							},
 						},
 					},
 					HostNetwork:  opts.EnableHostNetwork,