Sysdig - Remediate Workload p1monitor:p1monitor

charts/p1monitor/sysdig/kustomization.yaml

@@ -0,0 +1,8 @@
+resources:
+- all.yaml
+patches:
+- path: ./patches/1661950584_remediate_SecurityContext_runAsUser_for_workload_p1monitor.yaml
+  target:
+    kind: Deployment
+    name: p1monitor
+    namespace: p1monitor

charts/p1monitor/sysdig/patches/1661950584_remediate_SecurityContext_runAsUser_for_workload_p1monitor.yaml

@@ -0,0 +1,10 @@
+kind: .
+metadata:
+  name: .
+spec:
+  template:
+    spec:
+      containers:
+      - name: p1monitor
+        securityContext:
+          runAsUser: 1000

charts/p1monitor/sysdig/sysdig_helm.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+
+# ============================================================================
+# Sysdig requires this file to apply remediation patches to your Helm chart.
+# Run "helm install --post-renderer=sysdig_helm.sh" to use Sysdig patches.
+# For more information, follow the link: https://docs.sysdig.com/en/docs/sysdig-secure
+# ============================================================================
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )"
+cat <&0 > "$DIR"/all.yaml
+kustomize build "$DIR" && rm "$DIR"/all.yaml