From 1450a74b8c5ecd346d2339b8bed6f18e3192b549 Mon Sep 17 00:00:00 2001
From: James Callahan <jamescallahan@bitgo.com>
Date: Mon, 8 Nov 2021 18:54:20 +1100
Subject: [PATCH] loki-canary: run as non-root

---
 loki-canary/resources.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/loki-canary/resources.yaml b/loki-canary/resources.yaml
index f3d7e78..ba5969b 100644
--- a/loki-canary/resources.yaml
+++ b/loki-canary/resources.yaml
@@ -39,6 +39,10 @@ spec:
           requests:
             cpu: 10m
             memory: 20Mi
+      securityContext:
+        runAsGroup: 1000
+        runAsNonRoot: true
+        runAsUser: 1000
       tolerations:
       - effect: NoSchedule
         operator: Exists