diff options
| author |   Krzysztof Opasiak <k.opasiak@samsung.com> | 2020-11-23 22:02:51 +0100 |
|---|---|---|
| committer | Krzysztof Opasiak <k.opasiak@samsung.com> | 2020-11-25 15:45:12 +0000 |
| commit | 4c4205834827a78e975f97dd624ac77d7e68510e (patch) | |
| tree | 3ca9333f14fd4e3490b66853605f257f24a49a09 /kubernetes/msb/charts/msb-consul/values.yaml | |
| parent | 6574b647a5838435b3688af82709507deb5724b5 (diff) | |
[MSB] Make consul run as non-root
Start whole consul container as non-root and ensure that both
dumb-init and consul are able to start and run as non-root.
Issue-ID: REQ-362
Change-Id: If5a737953122cc6cd22b8d43ac603b40f4b22727
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
(cherry picked from commit bc6a6674f749efc1693c4b6bd58a27f8c37a0ae0)
Diffstat (limited to 'kubernetes/msb/charts/msb-consul/values.yaml')
| -rw-r--r-- | kubernetes/msb/charts/msb-consul/values.yaml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/kubernetes/msb/charts/msb-consul/values.yaml b/kubernetes/msb/charts/msb-consul/values.yaml index d11649754f..49c51d1e39 100644 --- a/kubernetes/msb/charts/msb-consul/values.yaml +++ b/kubernetes/msb/charts/msb-consul/values.yaml @@ -83,3 +83,8 @@ resources: cpu: 20m memory: 100Mi unlimited: {} + +securityContext: + fsGroup: 1000 + runAsUser: 100 + runAsGroup: 1000 |