Flux Security Context Options

base/flux/kustomization.yaml

@@ -37,12 +37,15 @@ patches:
             terminationGracePeriodSeconds: 60
             # Required by Pod Security Policy
             securityContext:
-              runAsUser: 10000
-              fsGroup: 1337
+              runAsUser: 1000
+              fsGroup: 1000
             containers:
               - name: manager
                 # Required by Pod Security Policy
                 securityContext:
+                  runAsUser: 1000
+                  runAsGroup: 1000
+                  privileged: false
                   readOnlyRootFilesystem: true
                   allowPrivilegeEscalation: false
                   runAsNonRoot: true
@@ -128,4 +131,4 @@ patches:
                   memory: 150Mi
                 requests:
                   cpu: 100m
-                  memory: 150Mi                                
\ No newline at end of file
+                  memory: 150Mi                                

scripts/install_flux.sh

@@ -9,7 +9,7 @@ set -e
 REGISTRY_URL=registry1.dso.mil
 FLUX_KUSTOMIZATION=base/flux
 FLUX_SECRET=private-registry
-WAIT_TIMEOUT=120
+WAIT_TIMEOUT=300
 
 
 #