From 5fee96b404285cf666bec814970a4e0e08b40872 Mon Sep 17 00:00:00 2001 From: p53 Date: Tue, 23 Mar 2021 19:03:37 +0100 Subject: [PATCH] Fix cinder cert permissions (#7384) * Fix permissions of cinder cert * Change runuser for external_cloud_controller to kube user with id 999, part of 999 - kube-cert group --- .../external-openstack-cloud-controller-manager-ds.yml.j2 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/kubernetes-apps/external_cloud_controller/openstack/templates/external-openstack-cloud-controller-manager-ds.yml.j2 b/roles/kubernetes-apps/external_cloud_controller/openstack/templates/external-openstack-cloud-controller-manager-ds.yml.j2 index c623fecce..149f70b42 100644 --- a/roles/kubernetes-apps/external_cloud_controller/openstack/templates/external-openstack-cloud-controller-manager-ds.yml.j2 +++ b/roles/kubernetes-apps/external_cloud_controller/openstack/templates/external-openstack-cloud-controller-manager-ds.yml.j2 @@ -30,7 +30,7 @@ spec: node-role.kubernetes.io/control-plane: "" {% endif %} securityContext: - runAsUser: 1001 + runAsUser: 999 tolerations: - key: node.cloudprovider.kubernetes.io/uninitialized value: "true"