make registry-init privileged v2

kyma-project · Apr 30, 2024 · 1138fad · 1138fad
1 parent f2a5a89
commit 1138fad
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/config/serverless/charts/docker-registry/values.yaml b/config/serverless/charts/docker-registry/values.yaml
@@ -131,7 +131,7 @@ initContainers:
   # this is required to allow the initContainer to chmod the volumemount for the registry storage volume. This is incompatible with the security requirements above and should be fixed in the future.
     runAsUser: 0
     runAsGroup: 0
-    privileged: false
+    privileged: true # TODO: remove this field after resolving TODO in the init container
     allowPrivilegeEscalation: false
     capabilities:
       drop: ["ALL"]

diff --git a/config/serverless/values.yaml b/config/serverless/values.yaml
@@ -146,7 +146,7 @@ pod:
 containers:
   daemonset:
     initContainerSecurityContext:
-      privileged: true # TODO: remove this field after resolving TODO in the init container
+      privileged: false
       allowPrivilegeEscalation: false
       runAsUser: 0
     containerSecurityContext: