Breaking change in later `nginx-ingress` images
There is a breaking change in the upstream 0.16.x versions of the nginx-ingress
image: https://github.com/kubernetes/ingress-nginx/blob/master/Changelog.md#0162
This is to provide built-in support for not running as the root user.
securityContext:
capabilities:
drop:
- ALL
add:
- NET_BIND_SERVICE
# www-data -> 33
runAsUser: 33
In reviewing the upstream chart, it looks like these parameters are not specified. I also didn't see it in vendored chart either.
https://github.com/helm/charts/blob/master/stable/nginx-ingress/templates/controller-deployment.yaml
Edited by Joshua Lambert