From c77b0aa065431d2117036e30b82d69bd94eb1f6c Mon Sep 17 00:00:00 2001
From: Chris Farhood <chris@farhood.org>
Date: Sat, 17 Jan 2026 11:28:10 -0500
Subject: [PATCH] roll some back

---
 thelounge/statefulset.yaml | 3 ++-
 znc/statefulset.yaml       | 3 ++-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/thelounge/statefulset.yaml b/thelounge/statefulset.yaml
index 0b2029d..91d89dc 100644
--- a/thelounge/statefulset.yaml
+++ b/thelounge/statefulset.yaml
@@ -4,6 +4,8 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: thelounge
+  annotations:
+    polaris.fairwinds.com/runAsRootAllowed-exempt: "true" # linuxserver.io images don't support this, need to build my own
 spec:
   selector:
     matchLabels:
@@ -22,7 +24,6 @@ spec:
         image: ghcr.io/thelounge/thelounge:latest
         securityContext:
           allowPrivilegeEscalation: false
-          runAsNonRoot: true
         ports:
         - containerPort: 9000
           name: http-9000
diff --git a/znc/statefulset.yaml b/znc/statefulset.yaml
index 88b8635..fed71a3 100644
--- a/znc/statefulset.yaml
+++ b/znc/statefulset.yaml
@@ -4,6 +4,8 @@ apiVersion: apps/v1
 kind: StatefulSet
 metadata:
   name: znc
+  annotations:
+    polaris.fairwinds.com/runAsRootAllowed-exempt: "true" # linuxserver.io images don't support this, need to build my own
 spec:
   selector:
     matchLabels:
@@ -21,7 +23,6 @@ spec:
         image: lscr.io/linuxserver/znc:latest    
         securityContext:
           allowPrivilegeEscalation: false
-          runAsNonRoot: true
         ports:
         - containerPort: 6501
           name: irc-6501