Run pods as non-root user 23/103723/1
authorMichaelMorris <michael.morris@est.tech>
Tue, 10 Mar 2020 12:37:48 +0000 (12:37 +0000)
committerOfir Sonsino <ofir.sonsino@intl.att.com>
Mon, 16 Mar 2020 08:45:37 +0000 (08:45 +0000)
commit69ba31d1ea0b20c19df0e462a5bbb4b67097146a
tree99e5512aef2fb147fc3a7accbb72b7288e3255be
parent9272b75cc0d70645de21885b98200c1b9684dac9
Run pods as non-root user

Summary of changes:
sdc-cassandra-init
Added user sdc (in base image base_sdc-cqlsh - https://gerrit.onap.org/r/103436)
Run entrypoint as user sdc
Moved relevant files from /root/ to /home/sdc/

sdc-backend-init
Added user sdc (in base image base_sdc-python - https://gerrit.onap.org/r/103436)
Run entrypoint as user sdc
Moved relevant files from /root/ to /home/sdc/

sdc-backend
Run entrypoint as user jetty
Moved relevant files from /root/ to /var/lib/jetty/
Moved cadi & cert files from /opt/app/jetty to /var/lib/jetty/
Moved ready_probe from /var/lib/read-probe.sh to /var/lib/jetty/read-probe.sh

sdc-frontend
Run entrypoint as user jetty
Moved relevant files from /root/ to /var/lib/jetty/
Moved ready_probe from /var/lib/read-probe.sh to /var/lib/jetty/read-probe.sh

sdc-onboard-backend-docker
Run entrypoint as user jetty
Moved relevant files from /root/ to /var/lib/jetty/
Moved ready_probe from /var/lib/read-probe.sh to /var/lib/jetty/read-probe.sh

sdc-onboard-db-init-docker
Run entrypoint as user sdc
Added user sdc (in base image base_sdc-cqlsh - https://gerrit.onap.org/r/103436)
Moved relevant files from /root/ to /home/sdc/

Signed-off-by: MichaelMorris <michael.morris@est.tech>
Issue-ID: SDC-2798
Change-Id: I85be320a4a5e1cc5aeebbb98c4484d5d6fd06dfc
(cherry picked from commit a2abf6ea18d512d367277bacaf7476754dc0eff5)
25 files changed:
.gitignore
asdctool/sdc-cassandra-init/Dockerfile
asdctool/sdc-cassandra-init/startup.sh
catalog-be/sdc-backend-init/Dockerfile
catalog-be/sdc-backend-init/startup.sh
catalog-be/sdc-backend/Dockerfile
catalog-be/sdc-backend/chef-repo/cookbooks/sdc-catalog-be/files/default/cadi.properties
catalog-be/sdc-backend/chef-repo/cookbooks/sdc-catalog-be/files/default/cadi_truststore.jks
catalog-be/sdc-backend/chef-repo/cookbooks/sdc-catalog-be/files/default/keyfile
catalog-be/sdc-backend/chef-repo/cookbooks/sdc-catalog-be/recipes/BE_10_setup_cadi.rb
catalog-be/sdc-backend/chef-repo/cookbooks/sdc-catalog-be/recipes/BE_9_prepareProbeFile.rb
catalog-be/sdc-backend/chef-repo/cookbooks/sdc-catalog-be/templates/default/BE-distribution-engine-configuration.yaml.erb
catalog-be/sdc-backend/startup.sh
catalog-be/src/main/resources/cadi.properties
catalog-be/src/main/resources/config/configuration.yaml
catalog-be/src/main/resources/config/distribution-engine-configuration.yaml
catalog-fe/sdc-frontend/Dockerfile
catalog-fe/sdc-frontend/chef-repo/cookbooks/sdc-catalog-fe/recipes/FE_8_prepareProbeFile.rb
catalog-fe/sdc-frontend/startup.sh
openecomp-be/dist/sdc-onboard-backend-docker/artifacts/Dockerfile
openecomp-be/dist/sdc-onboard-backend-docker/artifacts/chef-repo/cookbooks/sdc-onboard-backend/recipes/ON_6_prepareProbeFile.rb
openecomp-be/dist/sdc-onboard-backend-docker/artifacts/startup.sh
openecomp-be/dist/sdc-onboard-db-init-docker/artifacts/Dockerfile
openecomp-be/dist/sdc-onboard-db-init-docker/artifacts/startup.sh
sdc-os-chef/scripts/docker_run.sh