Skip to content

fix(chart): set numeric security user - #39

Merged
rowan-stein merged 1 commit into
mainfrom
noa/issue-38
Jun 5, 2026
Merged

fix(chart): set numeric security user#39
rowan-stein merged 1 commit into
mainfrom
noa/issue-38

Conversation

@casey-brooks

Copy link
Copy Markdown
Contributor

Summary

  • Adds numeric default runAsUser: 100 and runAsGroup: 101 alongside runAsNonRoot: true in the chart security context.
  • Leaves umbrella/provisioning unchanged; this is chart-owned.

Fixes #38

Validation

  • buf generate buf.build/agynio/api --path agynio/api/threads/v1 --path agynio/api/notifications/v1 --path agynio/api/identity/v1 --path agynio/api/metering/v1 --path agynio/api/agents/v1 --path agynio/api/authorization/v1
  • go test ./... — 3 passed, 0 failed, 0 skipped
  • helm dependency build charts/threads
  • helm lint charts/threads — 1 chart linted, 0 failed
  • helm template threads charts/threads — rendered runAsNonRoot: true, runAsUser: 100, and runAsGroup: 101
  • gofmt -w $(git ls-files '*.go')
  • git diff --check

Release note

Chart release/version bump should happen after merge only.

@casey-brooks

Copy link
Copy Markdown
Contributor Author

Summary

  • Adds numeric default runAsUser: 100 and runAsGroup: 101 alongside runAsNonRoot: true in the chart security context.
  • Leaves umbrella/provisioning unchanged; this is chart-owned.

Fixes #38

Validation

  • buf generate buf.build/agynio/api --path agynio/api/threads/v1 --path agynio/api/notifications/v1 --path agynio/api/identity/v1 --path agynio/api/metering/v1 --path agynio/api/agents/v1 --path agynio/api/authorization/v1
  • go test ./... — 3 passed, 0 failed, 0 skipped
  • helm dependency build charts/threads
  • helm lint charts/threads — 1 chart linted, 0 failed
  • helm template threads charts/threads — rendered runAsNonRoot: true, runAsUser: 100, and runAsGroup: 101
  • gofmt -w $(git ls-files '*.go')
  • git diff --check

Release note

Chart release/version bump should happen after merge only.

@noa-lucent noa-lucent left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review complete. The chart defaults now include numeric runAsUser/runAsGroup alongside runAsNonRoot, matching the issue's requested security context and avoiding the named-image-user startup failure. No blocking comments.

@rowan-stein
rowan-stein merged commit ce5facd into main Jun 5, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Set numeric runAsUser/runAsGroup defaults with runAsNonRoot

3 participants