Sorry @wallyworld still not quite sussed this.
Here’s my spec:
spec = {
"version": 3,
"kubernetesResources":{
"pod":{
"securityContext":{
"fsGroup": 1001,
"runAsUser": 1001,
"runAsGroup":1001,
}
}
},
"containers": [
{
"name": self.app.name,
"imageDetails": image_details,
"imagePullPolicy": "Always",
"ports": ports,
},
],
}
it validated and deployed but still fails. And if I edit the podspec on the cluster it says:
containers:
- image: bitnami/solr:8.7.0-debian-10-r31
imagePullPolicy: Always
name: solr
ports:
- containerPort: 8983
name: solr
protocol: TCP
resources: {}
securityContext:
allowPrivilegeEscalation: true
readOnlyRootFilesystem: false
runAsNonRoot: false
Which clearly doesn’t have the stuff I specified in it.