From 8b9ee3061a88c07e5b6cd71db920b8bebe78fdbd Mon Sep 17 00:00:00 2001 From: "Matthew C. Morgan" Date: Fri, 23 Jan 2026 15:36:23 -0500 Subject: [PATCH 1/2] feat(copy_images.tf) use ironbank sourced images for kiali --- copy_images.tf | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/copy_images.tf b/copy_images.tf index d321b82..deab0e1 100644 --- a/copy_images.tf +++ b/copy_images.tf @@ -9,8 +9,8 @@ locals { enabled = true dest_path = null name = "istio-tools/kiali-operator" - source_image = "kiali/kiali-operator" - source_registry = format("%v/%v", local.ent_ecr_source, "quay") + source_image = "opensource/kiali/kiali-operator" + source_registry = format("%v/%v", local.ent_ecr_source, "ironbank") source_tag = var.kiali_application_version tag = var.kiali_application_version }, @@ -18,8 +18,8 @@ locals { enabled = true dest_path = null name = "istio-tools/kiali" - source_image = "kiali/kiali" - source_registry = format("%v/%v", local.ent_ecr_source, "quay") + source_image = "opensource/kiali/kiali" + source_registry = format("%v/%v", local.ent_ecr_source, "ironbank") source_tag = var.kiali_application_version tag = var.kiali_application_version }, From 27deec09616f292d650967c2252421c0abe0eb5b Mon Sep 17 00:00:00 2001 From: "Matthew C. Morgan" Date: Mon, 26 Jan 2026 13:31:39 -0500 Subject: [PATCH 2/2] fix(main.tf) enable runAsUser and runAsGroup for non-root users --- main.tf | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/main.tf b/main.tf index 5a689ab..e547603 100644 --- a/main.tf +++ b/main.tf @@ -14,6 +14,14 @@ resource "helm_release" "kiali_operator" { namespace = var.namespace set = [ + { + name = "securityContext.runAsUser" + value = 2001 + }, + { + name = "securityContext.runAsGroup" + value = 2001 + }, { name = "image.repo" value = format("%v/%v",