From 1a0836b9ea132ebda74529e3be6775058a89a1be Mon Sep 17 00:00:00 2001
From: Stefan Prodan <stefan.prodan@gmail.com>
Date: Thu, 19 Nov 2020 15:17:23 +0200
Subject: [PATCH] Add fsGroup to security context

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
---
 config/manager/deployment.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/config/manager/deployment.yaml b/config/manager/deployment.yaml
index e1c604d9..18224fac 100644
--- a/config/manager/deployment.yaml
+++ b/config/manager/deployment.yaml
@@ -18,6 +18,10 @@ spec:
         prometheus.io/port: "8080"
     spec:
       terminationGracePeriodSeconds: 10
+      # Required for AWS IAM Role bindings
+      # https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts-technical-overview.html
+      securityContext:
+        fsGroup: 1337
       containers:
       - name: manager
         image: fluxcd/kustomize-controller