[CONSUL] Make consul server run as non-root 56/114556/1
authorKrzysztof Opasiak <k.opasiak@samsung.com>
Tue, 3 Nov 2020 16:16:08 +0000 (17:16 +0100)
committerKrzysztof Opasiak <k.opasiak@samsung.com>
Tue, 3 Nov 2020 16:16:08 +0000 (17:16 +0100)
Modify the entrypoint to eliminate root process from container.

Issue-ID: REQ-362
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ic1302ac2858dda1bac71be4449ea74cfc73ba197

kubernetes/consul/charts/consul-server/templates/statefulset.yaml

index 430b6dd..d572ec2 100644 (file)
@@ -42,8 +42,10 @@ spec:
       containers:
       - name: {{ include "common.name" . }}
         image: "{{ include "common.repository" . }}/{{ .Values.image }}"
-        command: ["/usr/local/bin/docker-entrypoint.sh"]
+        command:
+        - sh
         args:
+        - /usr/local/bin/docker-entrypoint.sh
         - "agent"
         - "-bootstrap-expect={{ .Values.replicaCount }}"
         - "-enable-script-checks"