commit f2db5c1b80bc8bc4305f780e94b6f23c87516809
author rope252 <gareth.roper@est.tech> Mon Jan 10 14:15:16 2022 +0000
committer Sylvain Desbureaux <sylvain.desbureaux@orange.com> Thu Mar 03 16:35:26 2022 +0000
tree ecdc8e566ccee7fb6aeb23b38d07c40be5e4ed96
parent 0d2cf1aee02c84d5ff262b4ac1d414fdadf5432b

[DMAAP] Add pod security context to MR and others

Add security context to pods within DMAAP

Change-Id: I86f7bd79e77dec33879f4ee3b599799705d40a24
Issue-ID: OOM-2913
Signed-off-by: rope252 <gareth.roper@est.tech>

kubernetes/common/certInitializer/templates/_certInitializer.yaml

diff --git a/kubernetes/common/certInitializer/templates/_certInitializer.yaml b/kubernetes/common/certInitializer/templates/_certInitializer.yaml
index b1e85c0..1312d98 100644
--- a/kubernetes/common/certInitializer/templates/_certInitializer.yaml
+++ b/kubernetes/common/certInitializer/templates/_certInitializer.yaml
@@ -47,6 +47,8 @@
 - name: {{ include "common.name" $dot }}-aaf-config
   image: {{ include "repositoryGenerator.repository" $subchartDot }}/{{ $subchartDot.Values.global.aafAgentImage }}
   imagePullPolicy: {{ $subchartDot.Values.global.pullPolicy | default $subchartDot.Values.pullPolicy }}
+  securityContext:
+    runAsUser: 0
   volumeMounts:
   - mountPath: {{ $initRoot.mountPath }}
     name: {{ include "common.certInitializer._aafConfigVolumeName" $dot }}