From 53480c39f04bdfb7ce7b396290f2b441d23d696b Mon Sep 17 00:00:00 2001 From: "KHIYANI, RAHUL (rk0850)" Date: Tue, 13 Oct 2020 16:25:32 -0500 Subject: [PATCH] Add missing pod/container flags to alerta Adding runAsUser and readOnly-fs flag to alerta pod/container. The security context templates are added here: https://github.com/openstack/openstack-helm-infra/blob/master/alerta/templates/deployment.yaml#L52 Change-Id: I1136f776ffd7caf54310288a162563ef4e565bbe --- alerta/Chart.yaml | 2 +- alerta/values.yaml | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/alerta/Chart.yaml b/alerta/Chart.yaml index 07a27d83f..c76c96058 100644 --- a/alerta/Chart.yaml +++ b/alerta/Chart.yaml @@ -15,7 +15,7 @@ apiVersion: v1 appVersion: v8.0.2 description: OpenStack-Helm Alerta for Alertmanager. name: alerta -version: 0.1.3 +version: 0.1.4 home: https://github.com/alerta/alerta sources: - https://github.com/alerta/alerta diff --git a/alerta/values.yaml b/alerta/values.yaml index 21ce99f75..b0d7b13c4 100644 --- a/alerta/values.yaml +++ b/alerta/values.yaml @@ -72,6 +72,12 @@ pod: postgresql_create_db: readOnlyRootFilesystem: true allowPrivilegeEscalation: false + server: + pod: + runAsUser: 0 + container: + alerta: + readOnlyRootFilesystem: false affinity: anti: type: