Merge "Allow dr-node containers to run as non-root"
authorMike Elliott <mike.elliott@amdocs.com>
Wed, 17 Apr 2019 18:35:02 +0000 (18:35 +0000)
committerGerrit Code Review <gerrit@onap.org>
Wed, 17 Apr 2019 18:35:02 +0000 (18:35 +0000)
1  2 
kubernetes/dmaap/components/dmaap-dr-node/templates/statefulset.yaml

@@@ -45,6 -45,15 +45,15 @@@ spec
                fieldRef:
                  apiVersion: v1
                  fieldPath: metadata.namespace
+         - name: {{ include "common.name" . }}-permission-fixer
+           image: "{{ .Values.global.busyBoxRepository }}/{{ .Values.global.busyBoxImage }}"
+           imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
+           volumeMounts:
+           - mountPath: {{ .Values.persistence.spoolPath }}
+             name: {{ include "common.fullname" . }}-spool-data-pvc
+           - mountPath: {{ .Values.persistence.eventLogsPath }}
+             name: {{ include "common.fullname" . }}-event-logs-pvc
+           command: ["chown","-Rf","1000:1001", "/opt/app/datartr"]
        containers:
          - name: {{ include "common.name" . }}
            image: "{{ include "common.repository" . }}/{{ .Values.image }}"
  {{ toYaml .Values.affinity | indent 10 }}
          {{- end }}
          # Filebeat sidecar container
 -        - name: {{ include "common.fullname" . }}-filebeat-onap
 +        - name: {{ include "common.name" . }}-filebeat-onap
            image: "{{ .Values.global.loggingRepository }}/{{ .Values.global.loggingImage }}"
            imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
            volumeMounts:
              name: {{ include "common.fullname" . }}-log
          - name: {{ include "common.fullname" . }}-filebeat-conf
            configMap:
 -            name: {{ include "common.fullname" . }}-dmaap-filebeat-configmap
 +            name: {{ .Release.Name }}-dmaap-filebeat-configmap
          - name: {{ include "common.fullname" . }}-data-filebeat
            emptyDir: {}
          - name:  {{ include "common.fullname" . }}-event-logs-pvc