diff options
| author |   ChrisC <christophe.closset@intl.att.com> | 2020-03-17 14:23:42 +0100 |
|---|---|---|
| committer | ChrisC <christophe.closset@intl.att.com> | 2020-03-24 13:37:37 +0100 |
| commit | 48bcfb9d4b03ac3e2e6915f7bdf72599c8794d43 (patch) | |
| tree | f0d2d8d6946ea76d6f54533538dff131c8a70cef /auth/helm/aaf-hello | |
| parent | 083a7eb21620467ae1f7d5ba9341e12f75f9cc41 (diff) | |
AAF non-root
update AAF service dockerfiles to run as user AAF, reusing existing script infra
Issue-ID: AAF-1102
Signed-off-by: ChrisC <christophe.closset@intl.att.com>, JulienBe <jb3179x@att.com>
Change-Id: I2d9feef65a98d4545e407825533cd1741f891b45
Diffstat (limited to 'auth/helm/aaf-hello')
| -rw-r--r-- | auth/helm/aaf-hello/templates/aaf-hello.yaml | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/auth/helm/aaf-hello/templates/aaf-hello.yaml b/auth/helm/aaf-hello/templates/aaf-hello.yaml index 3ff9a576..a79f39ed 100644 --- a/auth/helm/aaf-hello/templates/aaf-hello.yaml +++ b/auth/helm/aaf-hello/templates/aaf-hello.yaml @@ -56,6 +56,18 @@ spec: persistentVolumeClaim: claimName: aaf-hello-pvc initContainers: + - command: + - /bin/sh + - -c + - | + chmod -R 775 /opt/app/osaaf + chown -R 1000:1000 /opt/app/osaaf + image: busybox:1.28 + imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }} + name: init-sysctl + volumeMounts: + - mountPath: /opt/app/osaaf + name: aaf-hello-vol - name: aaf-hello-config image: "{{ .Values.image.repository }}{{ .Values.service.agentImage }}" imagePullPolicy: IfNotPresent |