UNCLASSIFIED - NO CUI

Skip to content

Set id's to comply with kyverno

Jimmy Bourque requested to merge kyverno-policies-fix into main

General MR

Summary

ArgoCD tests are currently failing in main pipeline due to not being compliant with recent kyverno policy changes. Since this image is not within our control I had to use a user/group that already existed so I used the default user/group for apache.

  • Added user and group id to deployment to avoid running as root
  • Added additional environment variables to allow apache to run as non root user

Relevant logs/screenshots

Validated it could be deployed in an environment that has the most recent kyverno policies:

image

image

Linked Issue

issue

Upgrade Notices

(Include any relevant notes about upgrades here or write "N/A" if there are none)

Edited by Jimmy Bourque

Merge request reports