Add basic security context to Tiller pod template

8 years ago · f011f74e54
parent 2b7d216e87
commit f011f74e54
1 changed files with 3 additions and 0 deletions
--- a/cmd/helm/installer/install.go
+++ b/cmd/helm/installer/install.go
@ -225,6 +225,9 @@ func generateDeployment(opts *Options) (*v1beta1.Deployment, error) {
 								InitialDelaySeconds: 1,
 								TimeoutSeconds:      1,
 							},
+							SecurityContext: &v1.SecurityContext{
+								RunAsNonRoot: &[]bool{false}[0],
+							},
 						},
 					},
 					HostNetwork:  opts.EnableHostNetwork,