Code Review
/
oom.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
review
|
tree
raw
|
inline
| side by side
Run SDC pods as non-root
[oom.git]
/
kubernetes
/
sdc
/
charts
/
sdc-dcae-be
/
templates
/
deployment.yaml
diff --git
a/kubernetes/sdc/charts/sdc-dcae-be/templates/deployment.yaml
b/kubernetes/sdc/charts/sdc-dcae-be/templates/deployment.yaml
index
26b4f4e
..
6072148
100644
(file)
--- a/
kubernetes/sdc/charts/sdc-dcae-be/templates/deployment.yaml
+++ b/
kubernetes/sdc/charts/sdc-dcae-be/templates/deployment.yaml
@@
-20,7
+20,7
@@
metadata:
labels:
app: {{ include "common.name" . }}
chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
labels:
app: {{ include "common.name" . }}
chart: {{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}
- release: {{
.Release.Name
}}
+ release: {{
include "common.release" .
}}
heritage: {{ .Release.Service }}
spec:
replicas: {{ .Values.replicaCount }}
heritage: {{ .Release.Service }}
spec:
replicas: {{ .Values.replicaCount }}
@@
-28,7
+28,7
@@
spec:
metadata:
labels:
app: {{ include "common.name" . }}
metadata:
labels:
app: {{ include "common.name" . }}
- release: {{
.Release.Name
}}
+ release: {{
include "common.release" .
}}
spec:
initContainers:
- name: {{ include "common.name" . }}-readiness
spec:
initContainers:
- name: {{ include "common.name" . }}-readiness
@@
-52,7
+52,7
@@
spec:
- /root/job_complete.py
args:
- --job-name
- /root/job_complete.py
args:
- --job-name
- - {{
.Release.Name
}}-sdc-be-config-backend
+ - {{
include "common.release" .
}}-sdc-be-config-backend
env:
- name: NAMESPACE
valueFrom:
env:
- name: NAMESPACE
valueFrom:
@@
-92,7
+92,7
@@
spec:
fieldPath: status.podIP
volumeMounts:
- name: {{ include "common.fullname" . }}-environments
fieldPath: status.podIP
volumeMounts:
- name: {{ include "common.fullname" . }}-environments
- mountPath: /
root
/chef-solo/environments/
+ mountPath: /
var/lib/jetty
/chef-solo/environments/
- name: {{ include "common.fullname" . }}-localtime
mountPath: /etc/localtime
readOnly: true
- name: {{ include "common.fullname" . }}-localtime
mountPath: /etc/localtime
readOnly: true
@@
-134,7
+134,7
@@
spec:
path: /etc/localtime
- name: {{ include "common.fullname" . }}-filebeat-conf
configMap:
path: /etc/localtime
- name: {{ include "common.fullname" . }}-filebeat-conf
configMap:
- name: {{
.Release.Name
}}-sdc-filebeat-configmap
+ name: {{
include "common.release" .
}}-sdc-filebeat-configmap
- name: {{ include "common.fullname" . }}-data-filebeat
emptyDir: {}
- name: {{ include "common.fullname" . }}-logback
- name: {{ include "common.fullname" . }}-data-filebeat
emptyDir: {}
- name: {{ include "common.fullname" . }}-logback
@@
-142,7
+142,7
@@
spec:
name : {{ include "common.fullname" . }}-logging-configmap
- name: {{ include "common.fullname" . }}-environments
configMap:
name : {{ include "common.fullname" . }}-logging-configmap
- name: {{ include "common.fullname" . }}-environments
configMap:
- name: {{
.Release.Name
}}-sdc-environments-configmap
+ name: {{
include "common.release" .
}}-sdc-environments-configmap
defaultMode: 0755
- name: {{ include "common.fullname" . }}-logs
emptyDir: {}
defaultMode: 0755
- name: {{ include "common.fullname" . }}-logs
emptyDir: {}