diff options
| author |   Krzysztof Opasiak <k.opasiak@samsung.com> | 2020-11-23 22:02:51 +0100 |
|---|---|---|
| committer | Krzysztof Opasiak <k.opasiak@samsung.com> | 2020-11-23 22:09:55 +0100 |
| commit | bc6a6674f749efc1693c4b6bd58a27f8c37a0ae0 (patch) | |
| tree | 15e2625591ed0d6353ff802eb331d831fcaf7b8d /kubernetes/msb/charts/msb-consul/values.yaml | |
| parent | f0dacd23777a7998915afe00150b25135b932f86 (diff) | |
[MSB] Make consul run as non-root
Start whole consul container as non-root and ensure that both
dumb-init and consul are able to start and run as non-root.
Issue-ID: REQ-362
Change-Id: If5a737953122cc6cd22b8d43ac603b40f4b22727
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Diffstat (limited to 'kubernetes/msb/charts/msb-consul/values.yaml')
| -rw-r--r-- | kubernetes/msb/charts/msb-consul/values.yaml | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/kubernetes/msb/charts/msb-consul/values.yaml b/kubernetes/msb/charts/msb-consul/values.yaml index e87144c87b..4704f3b24d 100644 --- a/kubernetes/msb/charts/msb-consul/values.yaml +++ b/kubernetes/msb/charts/msb-consul/values.yaml @@ -83,3 +83,8 @@ resources: cpu: 20m memory: 100Mi unlimited: {} + +securityContext: + fsGroup: 1000 + runAsUser: 100 + runAsGroup: 1000 |