From 4d9f35fc0c9c437b00335a75bd0201572ebfa544 Mon Sep 17 00:00:00 2001 From: econwar Date: Tue, 16 Apr 2019 08:02:13 +0000 Subject: Allow dr-node containers to run as non-root Update image version to 2.1.0 that has year long certs Change-Id: If17c569c6db879b6fcee9221307560a54f9cb422 Issue-ID: DMAAP-1134 Signed-off-by: econwar --- .../dmaap/components/dmaap-dr-node/templates/statefulset.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'kubernetes/dmaap/components/dmaap-dr-node/templates') diff --git a/kubernetes/dmaap/components/dmaap-dr-node/templates/statefulset.yaml b/kubernetes/dmaap/components/dmaap-dr-node/templates/statefulset.yaml index ec31f3f750..de3324fe19 100644 --- a/kubernetes/dmaap/components/dmaap-dr-node/templates/statefulset.yaml +++ b/kubernetes/dmaap/components/dmaap-dr-node/templates/statefulset.yaml @@ -45,6 +45,15 @@ spec: fieldRef: apiVersion: v1 fieldPath: metadata.namespace + - name: {{ include "common.name" . }}-permission-fixer + image: "{{ .Values.global.busyBoxRepository }}/{{ .Values.global.busyBoxImage }}" + imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }} + volumeMounts: + - mountPath: {{ .Values.persistence.spoolPath }} + name: {{ include "common.fullname" . }}-spool-data-pvc + - mountPath: {{ .Values.persistence.eventLogsPath }} + name: {{ include "common.fullname" . }}-event-logs-pvc + command: ["chown","-Rf","1000:1001", "/opt/app/datartr"] containers: - name: {{ include "common.name" . }} image: "{{ include "common.repository" . }}/{{ .Values.image }}" -- cgit 1.2.3-korg