From b38185a167552adefcdd2a32e517e912e01dd683 Mon Sep 17 00:00:00 2001 From: jananib Date: Thu, 23 Apr 2020 19:33:45 +0530 Subject: Making mounted volume non-root CDS non-root user addition Change-Id: I16a3c9b7de1ff74e4c6b208d49ab25664e580fbb Issue-ID: OOM-2386 Signed-off-by: jananib --- .../charts/cds-blueprints-processor/templates/deployment.yaml | 11 +++++++++++ 1 file changed, 11 insertions(+) (limited to 'kubernetes') diff --git a/kubernetes/cds/charts/cds-blueprints-processor/templates/deployment.yaml b/kubernetes/cds/charts/cds-blueprints-processor/templates/deployment.yaml index ab7245e56a..ac0e9c5f80 100755 --- a/kubernetes/cds/charts/cds-blueprints-processor/templates/deployment.yaml +++ b/kubernetes/cds/charts/cds-blueprints-processor/templates/deployment.yaml @@ -85,6 +85,17 @@ spec: image: "{{ .Values.global.readinessRepository }}/{{ .Values.global.readinessImage }}" imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }} name: {{ include "common.name" . }}-readiness + - name: fix-permission + command: + - chown + - -R + - 100:101 + - /opt/app/onap/blueprints/deploy + image: busybox:latest + imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }} + volumeMounts: + - mountPath: {{ .Values.persistence.deployedBlueprint }} + name: {{ include "common.fullname" . }}-blueprints containers: - name: {{ include "common.name" . }} image: "{{ include "common.repository" . }}/{{ .Values.image }}" -- cgit 1.2.3-korg