commit 86a28cdb200f482bc9a2e1f281ec1c51938f6c2c
author Krzysztof Opasiak <k.opasiak@samsung.com> Wed Sep 09 21:23:32 2020 +0200
committer Krzysztof Opasiak <k.opasiak@samsung.com> Wed Sep 09 21:25:14 2020 +0200
tree eb5a8192627abdd9a2851a845079286167e501bf
parent 7e1a8495095461843a13b39bf02571cf241defb8

[COMMON] Make mongo run as non-root

Use our helper template and k8s features to make mongodb run as a
non-root user as per Guiling requirements.

Issue-ID: DCAEGEN2-2424
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I44bc079a2cc49dc1b0f1da88e220290098e909d5

kubernetes/common/mongo/values.yaml

diff --git a/kubernetes/common/mongo/values.yaml b/kubernetes/common/mongo/values.yaml
index d272f70..d8988c3 100644
--- a/kubernetes/common/mongo/values.yaml
+++ b/kubernetes/common/mongo/values.yaml
@@ -83,6 +83,10 @@
   rpcbindPort: 111
   rpcbindUdpPort: 111
 
+securityContext:
+  user_id: 999
+  group_id: 999
+
 ingress:
   enabled: false