altf4arnold/datatracker
1
0
Fork 0
Code Issues Pull requests Actions 3 Packages Projects Releases Wiki Activity

ci: non-root user for scout containers

Browse source
This commit is contained in:
Jennifer Richards 2024-04-25 17:44:38 -03:00 committed by Nicolas Giard
parent c8ee43da95
commit 70c32254a9
2 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
helm/templates/deployments/celery.yaml
View file

@ -37,6 +37,10 @@ spec:
- "sh"
- "-c"
- "./core-agent probe --tcp 0.0.0.0:6590 | grep -q 'Agent found'"
securityContext:
readOnlyRootFilesystem: {{ default true .Values.scoutapm.readOnlyRootFilesystem }}
runAsUser: {{ default 65534 .Values.scoutapm.runAsUser }} # "nobody" user by default
runAsGroup: {{ default 65534 .Values.scoutapm.runAsGroup }} # "nogroup" group by default
{{- end }}
- name: {{ .Chart.Name }}
securityContext:

4
helm/templates/deployments/datatracker.yaml
View file

@ -37,6 +37,10 @@ spec:
- "sh"
- "-c"
- "./core-agent probe --tcp 0.0.0.0:6590 | grep -q 'Agent found'"
securityContext:
readOnlyRootFilesystem: {{ default true .Values.scoutapm.readOnlyRootFilesystem }}
runAsUser: {{ default 65534 .Values.scoutapm.runAsUser }} # "nobody" user by default
runAsGroup: {{ default 65534 .Values.scoutapm.runAsGroup }} # "nogroup" group by default
{{- end }}
- name: {{ .Chart.Name }}
securityContext: