Change user in securityContext

bitnami/nginx-ingress-controller/README.md

@@ -151,6 +151,9 @@ Parameter | Description | Default
 `defaultBackend.service.type` | type of default backend service to create | `ClusterIP`
 `imagePullSecrets` | name of Secret resource containing private registry credentials | `nil`
 `rbac.create` | if `true`, create & use RBAC resources | `true`
+`securityContext.enabled` |	Enable security context	| `true`
+`securityContext.fsGroup` |	Group ID for the container	| `1001`
+`securityContext.runAsUser` |	User ID for the container	| `1001`
 `podSecurityPolicy.enabled` | if `true`, create & use Pod Security Policy resources | `false`
 `serviceAccount.create` | if `true`, create a service account | ``
 `serviceAccount.name` | The name of the service account to use. If not set and `create` is `true`, a name is generated using the fullname template. | ``

bitnami/nginx-ingress-controller/templates/controller-daemonset.yaml

@@ -85,8 +85,8 @@ spec:
                 - ALL
                 add:
                 - NET_BIND_SERVICE
-            # www-data -> 33
-            runAsUser: 33
+            fsGroup: {{ .Values.securityContext.fsGroup }}
+            runAsUser: {{ .Values.securityContext.runAsUser }}
           {{- end }}
           env:
             - name: POD_NAME

bitnami/nginx-ingress-controller/templates/controller-deployment.yaml

@@ -85,8 +85,8 @@ spec:
                 - ALL
                 add:
                 - NET_BIND_SERVICE
-            # www-data -> 33
-            runAsUser: 33
+            fsGroup: {{ .Values.securityContext.fsGroup }}
+            runAsUser: {{ .Values.securityContext.runAsUser }}
           {{- end }}
           env:
             - name: POD_NAME

bitnami/nginx-ingress-controller/values.yaml

@@ -355,6 +355,14 @@ defaultBackend:
 rbac:
   create: true
 
+## Kubernetes Security Context
+## https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
+##
+securityContext:
+  enabled: true
+  fsGroup: 1001
+  runAsUser: 1001
+
 # If true, create & use Pod Security Policy resources
 # https://kubernetes.io/docs/concepts/policy/pod-security-policy/
 podSecurityPolicy: