Commit graph

3 commits

Author SHA1 Message Date
Jennifer Richards 30a4a5a77b ci: run rabbitmq as non-root (#7362)
* ci: securityContext for rabbitmq

* ci: logs from rabbitmq as json to console

* ci: tmp volume for rabbitmq

Needed since rootfs is now read-only

* ci: fix permissions on /var/lib/rabbitmq vol

Rabbitmq needs to be able to write to the fs at
/var/lib/rabbitmq. It may be possible to get rid
of the initContainer and use fsGroup in the pod
securityContext to manage this, but that does not
work for the hostVolume mounts I use for dev.
The solution here moves the actual mount to the
rabbitmq/ directory in the rabbitmq-data volume
and uses an initContainer to set the permissions
on that. That should work for any volume type.
2024-05-13 21:41:36 -04:00
Jennifer Richards 206a4bb749 ci: clean up labels and service values (#7314)
* ci: Remove unused service values

* ci: Reorg labels
2024-05-13 21:41:36 -04:00
Jennifer Richards c987bacc95 ci: Rabbitmq progress (wip) (#7233)
* ci: rabbitmq service (wip)

* ci: customize rabbitmq config
2024-05-13 21:41:36 -04:00