From 4aa45c75ac68a5358d480b59fb47f918fa410086 Mon Sep 17 00:00:00 2001 From: Krzysztof Opasiak Date: Tue, 3 Nov 2020 17:16:08 +0100 Subject: [PATCH] [CONSUL] Make consul server run as non-root Modify the entrypoint to eliminate root process from container. Issue-ID: REQ-362 Signed-off-by: Krzysztof Opasiak Change-Id: Ic1302ac2858dda1bac71be4449ea74cfc73ba197 --- kubernetes/consul/charts/consul-server/templates/statefulset.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/kubernetes/consul/charts/consul-server/templates/statefulset.yaml b/kubernetes/consul/charts/consul-server/templates/statefulset.yaml index 430b6dd1bd..d572ec2d54 100644 --- a/kubernetes/consul/charts/consul-server/templates/statefulset.yaml +++ b/kubernetes/consul/charts/consul-server/templates/statefulset.yaml @@ -42,8 +42,10 @@ spec: containers: - name: {{ include "common.name" . }} image: "{{ include "common.repository" . }}/{{ .Values.image }}" - command: ["/usr/local/bin/docker-entrypoint.sh"] + command: + - sh args: + - /usr/local/bin/docker-entrypoint.sh - "agent" - "-bootstrap-expect={{ .Values.replicaCount }}" - "-enable-script-checks" -- 2.16.6