Breaking change in later `nginx-ingress` images

There is a breaking change in the upstream 0.16.x versions of the nginx-ingress image: https://github.com/kubernetes/ingress-nginx/blob/master/Changelog.md#0162

This is to provide built-in support for not running as the root user.

  securityContext:
    capabilities:
        drop:
        - ALL
        add:
        - NET_BIND_SERVICE
    # www-data -> 33
    runAsUser: 33

In reviewing the upstream chart, it looks like these parameters are not specified. I also didn't see it in vendored chart either.

https://github.com/helm/charts/blob/master/stable/nginx-ingress/templates/controller-deployment.yaml

Edited by silv