Use rancher/shell

packages/rancher-monitoring/templates/crd-template/templates/jobs.yaml

@@ -17,8 +17,8 @@ spec:
     spec:
       serviceAccountName: {{ .Chart.Name }}-manager
       securityContext:
-        runAsNonRoot: true
-        runAsUser: 1000
+        runAsNonRoot: false
+        runAsUser: 0
       initContainers:
         - name: set-preserve-unknown-fields-false
           image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}
@@ -93,8 +93,8 @@ spec:
     spec:
       serviceAccountName: {{ .Chart.Name }}-manager
       securityContext:
-        runAsNonRoot: true
-        runAsUser: 1000
+        runAsNonRoot: false
+        runAsUser: 0
       initContainers:
         - name: remove-finalizers
           image: {{ template "system_default_registry" . }}{{ .Values.image.repository }}:{{ .Values.image.tag }}

packages/rancher-monitoring/templates/crd-template/templates/rbac.yaml

@@ -53,7 +53,7 @@ spec:
   hostIPC: false
   hostPID: false
   runAsUser:
-    rule: 'MustRunAsNonRoot'
+    rule: 'RunAsAny'
   seLinux:
     rule: 'RunAsAny'
   supplementalGroups:

packages/rancher-monitoring/templates/crd-template/values.yaml

@@ -7,5 +7,5 @@ global:
     systemDefaultRegistry: ""
 
 image:
-  repository: rancher/rancher-agent
-  tag: v2.5.7
+  repository: rancher/shell
+  tag: v0.1.8