(dubbo-kubernetes) branch master updated: [charts] change register discovery security context (#727)

[zhongxjian]

This is an automated email from the ASF dual-hosted git repository.

zhongxjian pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/dubbo-kubernetes.git


The following commit(s) were added to refs/heads/master by this push:
     new 6abc87b7 [charts] change register discovery security context (#727)
6abc87b7 is described below

commit 6abc87b7d78498ba0ad65278f08f78740f7cfd3f
Author: Jian Zhong <11638...@qq.com>
AuthorDate: Thu Jun 5 15:01:12 2025 +0800

    [charts] change register discovery security context (#727)
---
 .../dubbo-control/register-discovery/nacos/templates/statefulset.yaml   | 2 +-
 .../register-discovery/zookeeper/templates/statefulset.yaml             | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git 
a/manifests/charts/dubbo-control/register-discovery/nacos/templates/statefulset.yaml
 
b/manifests/charts/dubbo-control/register-discovery/nacos/templates/statefulset.yaml
index dc9ada8e..ac0bd93e 100644
--- 
a/manifests/charts/dubbo-control/register-discovery/nacos/templates/statefulset.yaml
+++ 
b/manifests/charts/dubbo-control/register-discovery/nacos/templates/statefulset.yaml
@@ -124,7 +124,7 @@ spec:
         securityContext:
           allowPrivilegeEscalation: false
           readOnlyRootFilesystem: true
-          runAsNonRoot: true
+          runAsNonRoot: false
           capabilities:
             drop:
               - ALL
diff --git 
a/manifests/charts/dubbo-control/register-discovery/zookeeper/templates/statefulset.yaml
 
b/manifests/charts/dubbo-control/register-discovery/zookeeper/templates/statefulset.yaml
index 9bea8a55..ef20ed7a 100644
--- 
a/manifests/charts/dubbo-control/register-discovery/zookeeper/templates/statefulset.yaml
+++ 
b/manifests/charts/dubbo-control/register-discovery/zookeeper/templates/statefulset.yaml
@@ -65,7 +65,7 @@ spec:
         securityContext:
           allowPrivilegeEscalation: false
           readOnlyRootFilesystem: true
-          runAsNonRoot: true
+          runAsNonRoot: false
           capabilities:
             drop:
               - ALL