Merge pull request #633 from bobcallaway/fix_end

move securityContext out of if clause
sigstore · Oct 16, 2023 · 1a369dc · 1a369dc
2 parents 0391405 + adbb8b5
commit 1a369dc
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/charts/sigstore-prober/Chart.yaml b/charts/sigstore-prober/Chart.yaml
@@ -4,7 +4,7 @@ description: Sigstore API Endpoint Prober
 
 type: application
 
-version: 0.0.15
+version: 0.0.16
 appVersion: 0.6.8
 
 

diff --git a/charts/sigstore-prober/README.md b/charts/sigstore-prober/README.md
@@ -1,6 +1,6 @@
 # sigstore-prober
 
-![Version: 0.0.15](https://img.shields.io/badge/Version-0.0.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.6.8](https://img.shields.io/badge/AppVersion-0.6.8-informational?style=flat-square)
+![Version: 0.0.16](https://img.shields.io/badge/Version-0.0.16-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.6.8](https://img.shields.io/badge/AppVersion-0.6.8-informational?style=flat-square)
 
 Sigstore API Endpoint Prober
 

diff --git a/charts/sigstore-prober/templates/deployment.yaml b/charts/sigstore-prober/templates/deployment.yaml
@@ -47,6 +47,10 @@ spec:
           {{- include "sigstore-prober.args" . | nindent 8 }}
         ports:
         - containerPort: {{ .Values.prometheus.port }} # metrics
+        securityContext:
+          runAsNonRoot: true
+          runAsUser: 65534
+          allowPrivilegeEscalation: false
       {{- if .Values.spec.args.trustRekorAPIPublicKey }}
         env:
         - name: SIGSTORE_REKOR_PUBLIC_KEY
@@ -55,10 +59,6 @@ spec:
         - name: sigstore
           mountPath: "/var/run/sigstore"
           readOnly: true
-        securityContext:
-          runAsNonRoot: true
-          runAsUser: 65534
-          allowPrivilegeEscalation: false
       volumes:
         - name: sigstore
           emptyDir: {}