From 6d0326ad5f2001de8f5bf9e10d6d705e9f87c052 Mon Sep 17 00:00:00 2001 From: Tomasz Maciejewski Date: Tue, 22 Apr 2025 10:58:08 +0200 Subject: [PATCH] k8s: add fsGroup to server-statefulset See: https://github.com/spiffe/spire-examples/issues/108 Signed-off-by: Tomasz Maciejewski --- k8s/quickstart/server-statefulset.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/k8s/quickstart/server-statefulset.yaml b/k8s/quickstart/server-statefulset.yaml index cd55816..d45d997 100644 --- a/k8s/quickstart/server-statefulset.yaml +++ b/k8s/quickstart/server-statefulset.yaml @@ -18,6 +18,8 @@ spec: app: spire-server spec: serviceAccountName: spire-server + securityContext: + fsGroup: 1000 containers: - name: spire-server image: ghcr.io/spiffe/spire-server:1.11.2