From 5fc083961a2b0c91078b6f398c18ea059e70dde5 Mon Sep 17 00:00:00 2001
From: Conan Scott <conanscott@gmail.com>
Date: Wed, 14 Jan 2026 04:24:28 +0000
Subject: [PATCH] Enforce runAsUser 100 for Vault server

---
 values.openshift.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/values.openshift.yaml b/values.openshift.yaml
index bcf71d5..9ec2d46 100644
--- a/values.openshift.yaml
+++ b/values.openshift.yaml
@@ -23,6 +23,10 @@ server:
   readinessProbe:
     path: "/v1/sys/health?uninitcode=204"
 
+  securityContext:
+    runAsNonRoot: true
+    runAsUser: 100
+
 csi:
   image:
     repository: "registry.connect.redhat.com/hashicorp/vault-csi-provider"