Add runAsUser field in all catalogs

Signed-off-by: Arnob kumar saha <[email protected]>
kubedb · Dec 1, 2023 · d1b67aa · d1b67aa
1 parent 38e2ba3
commit d1b67aa
Show file tree

Hide file tree

Showing 222 changed files with 682 additions and 0 deletions.
diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-1.1.0-opensearch.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-1.1.0-opensearch.yaml
@@ -18,6 +18,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.1.0-opensearch-v2021.11.10
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-1.2.2-opensearch.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-1.2.2-opensearch.yaml
@@ -18,6 +18,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.2.2-opensearch-v2021.12.24
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-1.3.13-opensearch.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-1.3.13-opensearch.yaml
@@ -18,6 +18,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.3.13-opensearch-v2023.09.26
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-1.3.2-opensearch.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-1.3.2-opensearch.yaml
@@ -18,6 +18,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.3.2-opensearch-v2022.05.24
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-2.0.1-opensearch.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-2.0.1-opensearch.yaml
@@ -18,6 +18,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:2.0.1-opensearch-v2023.02.27
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-2.11.0-opensearch.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-2.11.0-opensearch.yaml
@@ -18,6 +18,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:2.11.0-opensearch-v2023.11.27
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-2.5.0-opensearch.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-2.5.0-opensearch.yaml
@@ -18,6 +18,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:2.5.0-opensearch-v2023.11.27
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-2.8.0-opensearch.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-2.8.0-opensearch.yaml
@@ -18,6 +18,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:2.8.0-opensearch-v2023.11.27
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-6.8.1-searchguard.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-6.8.1-searchguard.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:6.8.1-searchguard
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-6.8.10-elasticstack.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-6.8.10-elasticstack.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:6.8.10-xpack-v1
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-6.8.16-elasticstack.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-6.8.16-elasticstack.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:6.8.16-xpack
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-6.8.22-elasticstack.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-6.8.22-elasticstack.yaml
@@ -18,6 +18,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:6.8.22-xpack-v2021.12.24
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.0.1-elasticstack.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.0.1-elasticstack.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:7.0.1-xpack-v1
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.0.1-opendistro.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.0.1-opendistro.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.0.2-opendistro
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.0.1-searchguard.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.0.1-searchguard.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:7.0.1-searchguard
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.1.1-elasticstack.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.1.1-elasticstack.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:7.1.1-xpack-v1
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.1.1-opendistro.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.1.1-opendistro.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.1.0-opendistro
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.1.1-searchguard.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.1.1-searchguard.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:7.1.1-searchguard
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.10.0-opendistro.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.10.0-opendistro.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.12.0-opendistro
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.10.2-opendistro.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.10.2-opendistro.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.13.2-opendistro-v2021.08.23
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.2.1-elasticstack.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.2.1-elasticstack.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:7.2.1-xpack-v1
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.2.1-opendistro.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.2.1-opendistro.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.2.1-opendistro
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.3.2-elasticstack.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.3.2-elasticstack.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:7.3.2-xpack-v1
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.3.2-opendistro.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.3.2-opendistro.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.3.0-opendistro
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.3.2-searchguard.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.3.2-searchguard.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:7.3.2-searchguard
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.4.2-elasticstack.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.4.2-elasticstack.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:7.4.2-xpack-v1
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.4.2-opendistro.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.4.2-opendistro.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.4.0-opendistro
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.6.1-opendistro.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.6.1-opendistro.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.6.0-opendistro
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.7.0-opendistro.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.7.0-opendistro.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.8.0-opendistro
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.8.0-opendistro.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.8.0-opendistro.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.9.0-opendistro
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/elasticsearch/elasticsearch-7.9.1-opendistro.yaml b/catalog/kubedb/raw/elasticsearch/elasticsearch-7.9.1-opendistro.yaml
@@ -14,6 +14,9 @@ spec:
     yqImage: ghcr.io/kubedb/elasticsearch-init:1.10.1-opendistro
   podSecurityPolicies:
     databasePolicyName: elasticsearch-db
+  securityContext:
+    runAsAnyNonRoot: true
+    runAsUser: 1000
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/kafka/kafka-3.3.0.yaml b/catalog/kubedb/raw/kafka/kafka-3.3.0.yaml
@@ -9,4 +9,6 @@ spec:
     image: ghcr.io/kubedb/kafka-kraft:3.3.0
   podSecurityPolicies:
     databasePolicyName: kafka-db
+  securityContext:
+    runAsUser: 1001
   version: 3.3.0
diff --git a/catalog/kubedb/raw/kafka/kafka-3.3.2.yaml b/catalog/kubedb/raw/kafka/kafka-3.3.2.yaml
@@ -9,4 +9,6 @@ spec:
     image: ghcr.io/kubedb/kafka-kraft:3.3.2
   podSecurityPolicies:
     databasePolicyName: kafka-db
+  securityContext:
+    runAsUser: 1001
   version: 3.3.2
diff --git a/catalog/kubedb/raw/kafka/kafka-3.4.0.yaml b/catalog/kubedb/raw/kafka/kafka-3.4.0.yaml
@@ -9,4 +9,6 @@ spec:
     image: ghcr.io/kubedb/kafka-kraft:3.4.0
   podSecurityPolicies:
     databasePolicyName: kafka-db
+  securityContext:
+    runAsUser: 1001
   version: 3.4.0
diff --git a/catalog/kubedb/raw/kafka/kafka-3.4.1.yaml b/catalog/kubedb/raw/kafka/kafka-3.4.1.yaml
@@ -9,4 +9,6 @@ spec:
     image: ghcr.io/kubedb/kafka-kraft:3.4.1
   podSecurityPolicies:
     databasePolicyName: kafka-db
+  securityContext:
+    runAsUser: 1001
   version: 3.4.1
diff --git a/catalog/kubedb/raw/kafka/kafka-3.5.1.yaml b/catalog/kubedb/raw/kafka/kafka-3.5.1.yaml
@@ -9,4 +9,6 @@ spec:
     image: ghcr.io/kubedb/kafka-kraft:3.5.1
   podSecurityPolicies:
     databasePolicyName: kafka-db
+  securityContext:
+    runAsUser: 1001
   version: 3.5.1
diff --git a/catalog/kubedb/raw/kafka/kafka-3.6.0.yaml b/catalog/kubedb/raw/kafka/kafka-3.6.0.yaml
@@ -9,4 +9,6 @@ spec:
     image: ghcr.io/kubedb/kafka-kraft:3.6.0
   podSecurityPolicies:
     databasePolicyName: kafka-db
+  securityContext:
+    runAsUser: 1001
   version: 3.6.0
diff --git a/catalog/kubedb/raw/mariadb/mariadb-10.10.2.yaml b/catalog/kubedb/raw/mariadb/mariadb-10.10.2.yaml
@@ -13,6 +13,8 @@ spec:
     image: ghcr.io/kubedb/mariadb-init:0.5.0
   podSecurityPolicies:
     databasePolicyName: maria-db
+  securityContext:
+    runAsUser: 999
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/mariadb/mariadb-10.10.7.yaml b/catalog/kubedb/raw/mariadb/mariadb-10.10.7.yaml
@@ -13,6 +13,8 @@ spec:
     image: ghcr.io/kubedb/mariadb-init:0.5.0
   podSecurityPolicies:
     databasePolicyName: maria-db
+  securityContext:
+    runAsUser: 999
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/mariadb/mariadb-10.11.2.yaml b/catalog/kubedb/raw/mariadb/mariadb-10.11.2.yaml
@@ -13,6 +13,8 @@ spec:
     image: ghcr.io/kubedb/mariadb-init:0.5.0
   podSecurityPolicies:
     databasePolicyName: maria-db
+  securityContext:
+    runAsUser: 999
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/mariadb/mariadb-10.11.6.yaml b/catalog/kubedb/raw/mariadb/mariadb-10.11.6.yaml
@@ -13,6 +13,8 @@ spec:
     image: ghcr.io/kubedb/mariadb-init:0.5.0
   podSecurityPolicies:
     databasePolicyName: maria-db
+  securityContext:
+    runAsUser: 999
   stash:
     addon:
       backupTask:

diff --git a/catalog/kubedb/raw/mariadb/mariadb-10.4.31.yaml b/catalog/kubedb/raw/mariadb/mariadb-10.4.31.yaml
@@ -13,6 +13,8 @@ spec:
     image: ghcr.io/kubedb/mariadb-init:0.5.0
   podSecurityPolicies:
     databasePolicyName: maria-db
+  securityContext:
+    runAsUser: 999
   stash:
     addon:
       backupTask: