From 3b2a93f642a253580085619e3e2bcad218e86b40 Mon Sep 17 00:00:00 2001
From: "KHIYANI, RAHUL (rk0850)" <rk0850@att.com>
Date: Tue, 25 Aug 2020 17:32:19 -0500
Subject: [PATCH] Run metacontroller from 34356 user

This adds the runAsUser flag to metacontroller at pod level

Change-Id: I347bf34e35ee60a17cb234819a3b8b870e0edb5b
---
 metacontroller/values.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/metacontroller/values.yaml b/metacontroller/values.yaml
index c6ca11a6f..29e230ba4 100644
--- a/metacontroller/values.yaml
+++ b/metacontroller/values.yaml
@@ -74,10 +74,12 @@ pod:
         default: 10
   security_context:
     metacontroller:
+      pod:
+        runAsUser: 34356
       container:
         metacontroller:
-          runAsUser: 34356
           readOnlyRootFilesystem: true
+          allowPrivilegeEscalation: false
 
 endpoints:
   cluster_domain_suffix: cluster.local