Supply runAsUser at the container level

noahbjohnson · Apr 17, 2019 · dc1c168 · dc1c168
1 parent 03127a9
commit dc1c168
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/jupyterhub/templates/hub/deployment.yaml b/jupyterhub/templates/hub/deployment.yaml
@@ -54,7 +54,6 @@ spec:
       serviceAccountName: hub
       {{- end }}
       securityContext:
-        runAsUser: {{ .Values.hub.uid }}
         fsGroup: {{ .Values.hub.fsGid }}
       {{- if .Values.hub.imagePullSecret.enabled }}
       imagePullSecrets:
@@ -113,6 +112,8 @@ spec:
           {{- with .Values.hub.image.pullPolicy }}
           imagePullPolicy: {{ . }}
           {{- end }}
+          securityContext:
+            runAsUser: {{ .Values.hub.uid }}
           env:
             - name: PYTHONUNBUFFERED
               value: "1"