Default to use pod security context

minio · Dec 19, 2022 · 0bd5ab7 · 0bd5ab7
1 parent c420b91
commit 0bd5ab7
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkg/resources/statefulsets/minio-statefulset.go b/pkg/resources/statefulsets/minio-statefulset.go
@@ -409,6 +409,12 @@ func poolContainerSecurityContext(pool *miniov2.Pool) *v1.SecurityContext {
 	runAsNonRoot := true
 	var runAsUser int64 = 1000
 	var runAsGroup int64 = 1000
+	// Default to Pod values
+	if pool.SecurityContext != nil {
+		runAsNonRoot = *pool.SecurityContext.RunAsNonRoot
+		runAsUser = *pool.SecurityContext.RunAsUser
+		runAsGroup = *pool.SecurityContext.RunAsGroup
+	}
 
 	securityContext := corev1.SecurityContext{
 		RunAsNonRoot: &runAsNonRoot,