datatracker/helm
Jennifer Richards 30a4a5a77b ci: run rabbitmq as non-root (#7362)
* ci: securityContext for rabbitmq

* ci: logs from rabbitmq as json to console

* ci: tmp volume for rabbitmq

Needed since rootfs is now read-only

* ci: fix permissions on /var/lib/rabbitmq vol

Rabbitmq needs to be able to write to the fs at
/var/lib/rabbitmq. It may be possible to get rid
of the initContainer and use fsGroup in the pod
securityContext to manage this, but that does not
work for the hostVolume mounts I use for dev.
The solution here moves the actual mount to the
rabbitmq/ directory in the rabbitmq-data volume
and uses an initContainer to set the permissions
on that. That should work for any volume type.
2024-05-13 21:41:36 -04:00
..
templates ci: run rabbitmq as non-root (#7362) 2024-05-13 21:41:36 -04:00
.helmignore chore: CRLF -> LF (#7214) 2024-05-13 21:41:36 -04:00
Chart.yaml chore: CRLF -> LF (#7214) 2024-05-13 21:41:36 -04:00
settings_local.py ci: default to static.ietf.org in helm chart 2024-05-13 21:41:36 -04:00
values.yaml ci: run rabbitmq as non-root (#7362) 2024-05-13 21:41:36 -04:00