From f8b4cd7b069dbd6dc7656453045c86f46f674285 Mon Sep 17 00:00:00 2001
From: Sergiusz Bazanski <q3k@hackerspace.pl>
Date: Sat, 15 Feb 2020 12:39:35 +0100
Subject: [PATCH] kube/redis: run as unprivileged user

Change-Id: If117384748cb6d06097742329095ae8936ed001c
---
 kube/redis.libsonnet | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/kube/redis.libsonnet b/kube/redis.libsonnet
index b90cb580..d272227f 100644
--- a/kube/redis.libsonnet
+++ b/kube/redis.libsonnet
@@ -75,6 +75,9 @@ local kube = import "kube.libsonnet";
                             resources: cfg.resources,
                         },
                     },
+                    securityContext: {
+                        runAsUser: 100,
+                    },
                 },
             },
         },