diff --git a/hack/object-store/object-store-deployment.yaml b/hack/object-store/object-store-deployment.yaml index 76a36585..4ecd1335 100644 --- a/hack/object-store/object-store-deployment.yaml +++ b/hack/object-store/object-store-deployment.yaml @@ -82,6 +82,8 @@ spec: drop: - ALL runAsNonRoot: true + runAsUser: 10001 # rustfs user ID + runAsGroup: 10001 # rustfs group ID seccompProfile: type: RuntimeDefault livenessProbe: diff --git a/hack/object-store/s3-client.yaml b/hack/object-store/s3-client.yaml index b70fb54a..57665c1c 100644 --- a/hack/object-store/s3-client.yaml +++ b/hack/object-store/s3-client.yaml @@ -57,6 +57,8 @@ spec: drop: - ALL runAsNonRoot: true + runAsUser: 65534 # nobody user ID + runAsGroup: 65534 # nobody group ID seccompProfile: type: RuntimeDefault securityContext: