diff --git a/pkg/cmd/stack/translate.go b/pkg/cmd/stack/translate.go index ede5b5f3d1bc..a0356bd2f743 100644 --- a/pkg/cmd/stack/translate.go +++ b/pkg/cmd/stack/translate.go @@ -214,9 +214,6 @@ func translateStatefulSet(svcName string, s *model.Stack, divert Divert) *appsv1 Affinity: translateAffinity(svc), NodeSelector: svc.NodeSelector, Volumes: translateVolumes(svc), - SecurityContext: &apiv1.PodSecurityContext{ - FSGroup: pointer.Int64(1000), - }, Containers: []apiv1.Container{ { Name: svcName, @@ -346,10 +343,6 @@ func getAddPermissionsInitContainer(svcName string, svc *model.Service) apiv1.Co ImagePullPolicy: apiv1.PullIfNotPresent, Command: initContainerCommand, VolumeMounts: initContainerVolumeMounts, - SecurityContext: &apiv1.SecurityContext{ - RunAsUser: pointer.Int64(0), - RunAsGroup: pointer.Int64(0), - }, } return initContainer } diff --git a/pkg/cmd/stack/translate_test.go b/pkg/cmd/stack/translate_test.go index 6f8b3441a8d2..18f8aa085bb3 100644 --- a/pkg/cmd/stack/translate_test.go +++ b/pkg/cmd/stack/translate_test.go @@ -261,10 +261,6 @@ func Test_translateStatefulSet(t *testing.T) { "node2": "value2", } assert.Equal(t, result.Spec.Template.Spec.NodeSelector, nodeSelector) - podSecurityContext := &apiv1.PodSecurityContext{ - FSGroup: pointer.Int64(1000), - } - assert.Equal(t, result.Spec.Template.Spec.SecurityContext, podSecurityContext) if *result.Spec.Replicas != 3 { t.Errorf("Wrong statefulset spec.replicas: '%d'", *result.Spec.Replicas) } @@ -293,10 +289,6 @@ func Test_translateStatefulSet(t *testing.T) { Name: pvcName, }, }, - SecurityContext: &apiv1.SecurityContext{ - RunAsUser: pointer.Int64(0), - RunAsGroup: pointer.Int64(0), - }, } assert.Equal(t, initContainer, result.Spec.Template.Spec.InitContainers[0]) initVolumeContainer := apiv1.Container{ @@ -653,10 +645,6 @@ func Test_translateJobWithVolumes(t *testing.T) { Name: pvcName, }, }, - SecurityContext: &apiv1.SecurityContext{ - RunAsUser: pointer.Int64(0), - RunAsGroup: pointer.Int64(0), - }, } if !reflect.DeepEqual(result.Spec.Template.Spec.InitContainers[0], initContainer) { t.Errorf("Wrong job init container: '%v' but expected '%v'", result.Spec.Template.Spec.InitContainers[0], initContainer)