diff options
| author |   Krzysztof Opasiak <k.opasiak@samsung.com> | 2020-11-03 17:16:08 +0100 |
|---|---|---|
| committer | Krzysztof Opasiak <k.opasiak@samsung.com> | 2020-11-03 17:16:08 +0100 |
| commit | 4aa45c75ac68a5358d480b59fb47f918fa410086 (patch) | |
| tree | 4a1b54a6c591dc305da71942f024ec2e92d090c8 /kubernetes | |
| parent | 7af75e9338697d095ca5c4f4ed218d8fa947b174 (diff) | |
[CONSUL] Make consul server run as non-root
Modify the entrypoint to eliminate root process from container.
Issue-ID: REQ-362
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ic1302ac2858dda1bac71be4449ea74cfc73ba197
Diffstat (limited to 'kubernetes')
| -rw-r--r-- | kubernetes/consul/charts/consul-server/templates/statefulset.yaml | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/kubernetes/consul/charts/consul-server/templates/statefulset.yaml b/kubernetes/consul/charts/consul-server/templates/statefulset.yaml index 430b6dd1bd..d572ec2d54 100644 --- a/kubernetes/consul/charts/consul-server/templates/statefulset.yaml +++ b/kubernetes/consul/charts/consul-server/templates/statefulset.yaml @@ -42,8 +42,10 @@ spec: containers: - name: {{ include "common.name" . }} image: "{{ include "common.repository" . }}/{{ .Values.image }}" - command: ["/usr/local/bin/docker-entrypoint.sh"] + command: + - sh args: + - /usr/local/bin/docker-entrypoint.sh - "agent" - "-bootstrap-expect={{ .Values.replicaCount }}" - "-enable-script-checks" |