From 48bcfb9d4b03ac3e2e6915f7bdf72599c8794d43 Mon Sep 17 00:00:00 2001 From: ChrisC Date: Tue, 17 Mar 2020 14:23:42 +0100 Subject: AAF non-root update AAF service dockerfiles to run as user AAF, reusing existing script infra Issue-ID: AAF-1102 Signed-off-by: ChrisC , JulienBe Change-Id: I2d9feef65a98d4545e407825533cd1741f891b45 --- auth/helm/aaf-hello/templates/aaf-hello.yaml | 12 ++++++++++++ 1 file changed, 12 insertions(+) (limited to 'auth/helm/aaf-hello') diff --git a/auth/helm/aaf-hello/templates/aaf-hello.yaml b/auth/helm/aaf-hello/templates/aaf-hello.yaml index 3ff9a576..a79f39ed 100644 --- a/auth/helm/aaf-hello/templates/aaf-hello.yaml +++ b/auth/helm/aaf-hello/templates/aaf-hello.yaml @@ -56,6 +56,18 @@ spec: persistentVolumeClaim: claimName: aaf-hello-pvc initContainers: + - command: + - /bin/sh + - -c + - | + chmod -R 775 /opt/app/osaaf + chown -R 1000:1000 /opt/app/osaaf + image: busybox:1.28 + imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }} + name: init-sysctl + volumeMounts: + - mountPath: /opt/app/osaaf + name: aaf-hello-vol - name: aaf-hello-config image: "{{ .Values.image.repository }}{{ .Values.service.agentImage }}" imagePullPolicy: IfNotPresent -- cgit 1.2.3-korg