summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKrzysztof Opasiak <k.opasiak@samsung.com>2020-11-03 17:16:08 +0100
committerKrzysztof Opasiak <k.opasiak@samsung.com>2020-11-03 17:16:08 +0100
commit4aa45c75ac68a5358d480b59fb47f918fa410086 (patch)
tree4a1b54a6c591dc305da71942f024ec2e92d090c8
parent7af75e9338697d095ca5c4f4ed218d8fa947b174 (diff)
[CONSUL] Make consul server run as non-root
Modify the entrypoint to eliminate root process from container. Issue-ID: REQ-362 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: Ic1302ac2858dda1bac71be4449ea74cfc73ba197
-rw-r--r--kubernetes/consul/charts/consul-server/templates/statefulset.yaml4
1 files changed, 3 insertions, 1 deletions
diff --git a/kubernetes/consul/charts/consul-server/templates/statefulset.yaml b/kubernetes/consul/charts/consul-server/templates/statefulset.yaml
index 430b6dd1bd..d572ec2d54 100644
--- a/kubernetes/consul/charts/consul-server/templates/statefulset.yaml
+++ b/kubernetes/consul/charts/consul-server/templates/statefulset.yaml
@@ -42,8 +42,10 @@ spec:
containers:
- name: {{ include "common.name" . }}
image: "{{ include "common.repository" . }}/{{ .Values.image }}"
- command: ["/usr/local/bin/docker-entrypoint.sh"]
+ command:
+ - sh
args:
+ - /usr/local/bin/docker-entrypoint.sh
- "agent"
- "-bootstrap-expect={{ .Values.replicaCount }}"
- "-enable-script-checks"