diff options
| author |   Krzysztof Opasiak <k.opasiak@samsung.com> | 2020-11-25 09:45:27 +0000 |
|---|---|---|
| committer |   Gerrit Code Review <gerrit@onap.org> | 2020-11-25 09:45:27 +0000 |
| commit | e3f62633f08855e77f8666bda7710f90790f8cac (patch) | |
| tree | 94ec7eee33580b0babfe2353c7a16db9f1c07a85 /kubernetes/msb/charts/msb-consul/templates/deployment.yaml | |
| parent | 4afda442cbd60618cea54f83743fa53e83eb481e (diff) | |
| parent | bc6a6674f749efc1693c4b6bd58a27f8c37a0ae0 (diff) | |
Merge "[MSB] Make consul run as non-root"
Diffstat (limited to 'kubernetes/msb/charts/msb-consul/templates/deployment.yaml')
| -rw-r--r-- | kubernetes/msb/charts/msb-consul/templates/deployment.yaml | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/kubernetes/msb/charts/msb-consul/templates/deployment.yaml b/kubernetes/msb/charts/msb-consul/templates/deployment.yaml index 2639a8ed36..c7472cca72 100644 --- a/kubernetes/msb/charts/msb-consul/templates/deployment.yaml +++ b/kubernetes/msb/charts/msb-consul/templates/deployment.yaml @@ -41,6 +41,16 @@ spec: - name: {{ include "common.name" . }} image: "{{ .Values.global.dockerHubRepository | default .Values.dockerHubRepository }}/{{ .Values.image }}" imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }} + securityContext: + runAsUser: {{ .Values.securityContext.runAsUser }} + runAsGroup: {{ .Values.securityContext.runAsGroup }} + command: + - docker-entrypoint.sh + args: + - "agent" + - "-dev" + - "-client" + - "0.0.0.0" ports: - containerPort: {{ .Values.service.internalPort }} # disable liveness probe when breakpoints set in debugger @@ -62,6 +72,9 @@ spec: - mountPath: /etc/localtime name: localtime readOnly: true + - mountPath: /usr/local/bin/docker-entrypoint.sh + name: entrypoint + subPath: docker-entrypoint.sh resources: {{ include "common.resources" . | indent 12 }} {{- if .Values.nodeSelector }} @@ -76,5 +89,9 @@ spec: - name: localtime hostPath: path: /etc/localtime + - name: entrypoint + configMap: + name: {{ include "common.fullname" . }}-entrypoint + defaultMode: 0777 imagePullSecrets: - name: "{{ include "common.namespace" . }}-docker-registry-key" |