allow k0scontroller logs collector to run as root (#1319)

* allow k0scontroller logs collector to run as root * remove privilege escallation permissions
replicatedhq · Oct 14, 2024 · cfc970c · cfc970c
1 parent d39db4a
commit cfc970c
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/operator/charts/embedded-cluster-operator/templates/embedded-cluster-logs-collector.yaml b/operator/charts/embedded-cluster-operator/templates/embedded-cluster-logs-collector.yaml
@@ -37,7 +37,8 @@ data:
               hostIPC: true
               hostNetwork: true
               hostPID: true
-              securityContext: {}
+              securityContext:
+                runAsUser: 0
               tolerations:
               - operator: Exists
               volumes:
@@ -65,7 +66,8 @@ data:
               hostIPC: true
               hostNetwork: true
               hostPID: true
-              securityContext: {}
+              securityContext:
+                runAsUser: 0
               tolerations:
               - operator: Exists
               volumes: