diff options
| author |   Sylvain Desbureaux <sylvain.desbureaux@orange.com> | 2020-11-30 07:47:29 +0000 |
|---|---|---|
| committer |   Gerrit Code Review <gerrit@onap.org> | 2020-11-30 07:47:29 +0000 |
| commit | 2d0eafec73643294cb5016b8e74d57a68608f822 (patch) | |
| tree | 043fa8dd4bc1371bc5ace9a7546715eac4ed2552 /kubernetes/consul/charts | |
| parent | 8aad493ec086c48e919e4f7ef85148e6532ffc46 (diff) | |
| parent | 217acfdf611de5bc52246acedcf248e32712f561 (diff) | |
Merge "[CONSUL] Make consul run as non-root"
Diffstat (limited to 'kubernetes/consul/charts')
| -rw-r--r-- | kubernetes/consul/charts/consul-server/templates/statefulset.yaml | 5 | ||||
| -rw-r--r-- | kubernetes/consul/charts/consul-server/values.yaml | 8 |
2 files changed, 11 insertions, 2 deletions
diff --git a/kubernetes/consul/charts/consul-server/templates/statefulset.yaml b/kubernetes/consul/charts/consul-server/templates/statefulset.yaml index 882e98fea3..16fda3a510 100644 --- a/kubernetes/consul/charts/consul-server/templates/statefulset.yaml +++ b/kubernetes/consul/charts/consul-server/templates/statefulset.yaml @@ -41,7 +41,10 @@ spec: - name: "{{ include "common.namespace" . }}-docker-registry-key" containers: - name: {{ include "common.name" . }} - image: {{ include "repositoryGenerator.dockerHubRepository" . }}/{{ .Values.image }} + image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }} + securityContext: + runAsUser: {{ .Values.securityContext.runAsUser }} + runAsGroup: {{ .Values.securityContext.runAsGroup }} command: ["/usr/local/bin/docker-entrypoint.sh"] args: - "agent" diff --git a/kubernetes/consul/charts/consul-server/values.yaml b/kubernetes/consul/charts/consul-server/values.yaml index 0039aa6654..48a26effd7 100644 --- a/kubernetes/consul/charts/consul-server/values.yaml +++ b/kubernetes/consul/charts/consul-server/values.yaml @@ -17,12 +17,13 @@ ################################################################# global: nodePortPrefix: 302 + repository: nexus3.onap.org:10001 ################################################################# # Application configuration defaults. ################################################################# # application image -image: consul:1.0.6 +image: onap/oom/consul:2.1.0 pullPolicy: Always # flag to enable debugging - application support required @@ -86,3 +87,8 @@ resources: cpu: 1 memory: 2Gi unlimited: {} + +securityContext: + fsGroup: 1000 + runAsUser: 100 + runAsGroup: 1000 |