| commit | bc6a6674f749efc1693c4b6bd58a27f8c37a0ae0 | [log] [tgz] |
|---|---|---|
| author | Krzysztof Opasiak <k.opasiak@samsung.com> | Mon Nov 23 22:02:51 2020 +0100 |
| committer | Krzysztof Opasiak <k.opasiak@samsung.com> | Mon Nov 23 22:09:55 2020 +0100 |
| tree | 15e2625591ed0d6353ff802eb331d831fcaf7b8d | |
| parent | f0dacd23777a7998915afe00150b25135b932f86 [diff] [blame] |
[MSB] Make consul run as non-root Start whole consul container as non-root and ensure that both dumb-init and consul are able to start and run as non-root. Issue-ID: REQ-362 Change-Id: If5a737953122cc6cd22b8d43ac603b40f4b22727 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
diff --git a/kubernetes/msb/charts/msb-consul/values.yaml b/kubernetes/msb/charts/msb-consul/values.yaml index e87144c..4704f3b 100644 --- a/kubernetes/msb/charts/msb-consul/values.yaml +++ b/kubernetes/msb/charts/msb-consul/values.yaml
@@ -83,3 +83,8 @@ cpu: 20m memory: 100Mi unlimited: {} + +securityContext: + fsGroup: 1000 + runAsUser: 100 + runAsGroup: 1000