From fa7803b8b83d3034b5f2ce0959003a84c192b2e6 Mon Sep 17 00:00:00 2001 From: Michael Raimondi Date: Fri, 1 Jun 2018 11:58:06 -0400 Subject: [PATCH] [stable/grafana] Relax user restrictions to work around non-numeric 'grafana' user (#5852) * relax user restrictions to work around non-numeric 'grafana' user * increment chart version --- stable/grafana/Chart.yaml | 2 +- stable/grafana/templates/podsecuritypolicy.yaml | 12 +++--------- 2 files changed, 4 insertions(+), 10 deletions(-) diff --git a/stable/grafana/Chart.yaml b/stable/grafana/Chart.yaml index 816ef55f5c..04e45f7b0c 100755 --- a/stable/grafana/Chart.yaml +++ b/stable/grafana/Chart.yaml @@ -1,5 +1,5 @@ name: grafana -version: 1.10.0 +version: 1.10.1 appVersion: 5.1.2 kubeVersion: "^1.8.0-0" description: The leading tool for querying and visualizing time series and metrics. diff --git a/stable/grafana/templates/podsecuritypolicy.yaml b/stable/grafana/templates/podsecuritypolicy.yaml index a53c9cb87a..ffe4822b53 100644 --- a/stable/grafana/templates/podsecuritypolicy.yaml +++ b/stable/grafana/templates/podsecuritypolicy.yaml @@ -29,18 +29,12 @@ spec: hostIPC: false hostPID: false runAsUser: - rule: 'MustRunAsNonRoot' + rule: 'RunAsAny' seLinux: rule: 'RunAsAny' supplementalGroups: - rule: 'MustRunAs' - ranges: - - min: 1 - max: 65535 + rule: 'RunAsAny' fsGroup: - rule: 'MustRunAs' - ranges: - - min: 1 - max: 65535 + rule: 'RunAsAny' readOnlyRootFilesystem: false {{- end }}