From 86a28cdb200f482bc9a2e1f281ec1c51938f6c2c Mon Sep 17 00:00:00 2001
From: Krzysztof Opasiak <k.opasiak@samsung.com>
Date: Wed, 9 Sep 2020 21:23:32 +0200
Subject: [COMMON] Make mongo run as non-root

Use our helper template and k8s features to make mongodb run as a
non-root user as per Guiling requirements.

Issue-ID: DCAEGEN2-2424
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I44bc079a2cc49dc1b0f1da88e220290098e909d5
---
 kubernetes/common/mongo/values.yaml | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'kubernetes/common/mongo/values.yaml')

diff --git a/kubernetes/common/mongo/values.yaml b/kubernetes/common/mongo/values.yaml
index d272f706ea..d8988c3ae7 100644
--- a/kubernetes/common/mongo/values.yaml
+++ b/kubernetes/common/mongo/values.yaml
@@ -83,6 +83,10 @@ service:
   rpcbindPort: 111
   rpcbindUdpPort: 111
 
+securityContext:
+  user_id: 999
+  group_id: 999
+
 ingress:
   enabled: false
 
-- 
cgit 1.2.3-korg