Code Review
/
oom.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
review
|
tree
raw
|
inline
| side by side
[MSB] Make consul run as non-root
[oom.git]
/
kubernetes
/
msb
/
charts
/
msb-consul
/
values.yaml
diff --git
a/kubernetes/msb/charts/msb-consul/values.yaml
b/kubernetes/msb/charts/msb-consul/values.yaml
index
d116497
..
4704f3b
100644
(file)
--- a/
kubernetes/msb/charts/msb-consul/values.yaml
+++ b/
kubernetes/msb/charts/msb-consul/values.yaml
@@
-21,7
+21,7
@@
global:
# Application configuration defaults.
#################################################################
# application image
# Application configuration defaults.
#################################################################
# application image
-dockerHubRepository:
registry.hub.docker.com
+dockerHubRepository:
docker.io
image: library/consul:1.4.3
pullPolicy: Always
istioSidecar: true
image: library/consul:1.4.3
pullPolicy: Always
istioSidecar: true
@@
-83,3
+83,8
@@
resources:
cpu: 20m
memory: 100Mi
unlimited: {}
cpu: 20m
memory: 100Mi
unlimited: {}
+
+securityContext:
+ fsGroup: 1000
+ runAsUser: 100
+ runAsGroup: 1000