aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/portal/components/portal-app/templates/deployment.yaml
diff options
context:
space:
mode:
authorSandeep Shah <sandeeplinux1068@gmail.com>2020-09-25 15:53:18 -0500
committerSylvain Desbureaux <sylvain.desbureaux@orange.com>2020-10-02 14:01:09 +0000
commitd6b989d947334a7da8acc36ae064d753db360f2c (patch)
treec8d02b15fcd77ececd798b088a8069c187fa3c5e /kubernetes/portal/components/portal-app/templates/deployment.yaml
parent0394e0d21274fd742cadcf9e91e68395bbd6a63f (diff)
[PORTAL] Non-root user for back-end database
Creation of a non-root user for portal backend mariaDB database. Update portal apps, such as front-end app and sdk app, to use the non-root user to access back-end mariaDB database Issue-ID: OOM-2576 Signed-off-by: SandeepLinux <Sandeep.Shah@att.com> Change-Id: Ie13c7d190c08a4075058b97b352f4b71bbb0aa47 Signed-off-by: Sylvain Desbureaux <sylvain.desbureaux@orange.com>
Diffstat (limited to 'kubernetes/portal/components/portal-app/templates/deployment.yaml')
-rw-r--r--kubernetes/portal/components/portal-app/templates/deployment.yaml4
1 files changed, 4 insertions, 0 deletions
diff --git a/kubernetes/portal/components/portal-app/templates/deployment.yaml b/kubernetes/portal/components/portal-app/templates/deployment.yaml
index 0be1fdc91f..d61f876528 100644
--- a/kubernetes/portal/components/portal-app/templates/deployment.yaml
+++ b/kubernetes/portal/components/portal-app/templates/deployment.yaml
@@ -61,6 +61,10 @@ spec:
{{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "portal-cass" "key" "password") | indent 12 }}
- name: CIPHER_ENC_KEY
{{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "cipher-enc-key" "key" "password") | indent 12 }}
+ - name: PORTAL_DB_USER
+ {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "portal-backend-db" "key" "login") | indent 12 }}
+ - name: PORTAL_DB_PASSWORD
+ {{- include "common.secret.envFromSecretFast" (dict "global" . "uid" "portal-backend-db" "key" "password") | indent 12 }}
volumeMounts:
- mountPath: /config-input
name: properties-onapportal-scrubbed