openstack/openstack-helm-infra
Code Issues Proposed changes

Rabbitmq: Add pod/container security context

Browse Source 
This updates the rabbitmq chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem to true

Change-Id: I68aa4b49bf6301e1b1004a526151fa0ab4b197b4
This commit is contained in:
RAHUL KHIYANI 2019-05-17 12:32:23 -05:00 committed by Rahul Khiyani
parent c01098f396
commit 7f47169f80
1 changed files with 15 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
rabbitmq/values.yaml
View File

@ -54,32 +54,38 @@ pod:
runAsUser: 65534 runAsUser: 65534
container: container:
rabbitmq_exporter: rabbitmq_exporter:
readOnlyRootFilesystem: false readOnlyRootFilesystem: true
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
server: server:
pod: pod:
runAsUser: 0 runAsUser: 999
container: container:
rabbitmq_password: rabbitmq_password:
readOnlyRootFilesystem: false runAsUser: 0
readOnlyRootFilesystem: true
rabbitmq_cookie: rabbitmq_cookie:
readOnlyRootFilesystem: false runAsUser: 0
readOnlyRootFilesystem: true
rabbitmq_perms: rabbitmq_perms:
readOnlyRootFilesystem: false runAsUser: 0
readOnlyRootFilesystem: true
rabbitmq: rabbitmq:
runAsUser: 0
readOnlyRootFilesystem: false readOnlyRootFilesystem: false
cluster_wait: cluster_wait:
pod: pod:
runAsUser: 0 runAsUser: 999
container: container:
rabbitmq_cluster_wait: rabbitmq_cluster_wait:
readOnlyRootFilesystem: false allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
test: test:
pod: pod:
runAsUser: 0 runAsUser: 999
container: container:
rabbitmq_test: rabbitmq_test:
readOnlyRootFilesystem: false allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
affinity: affinity:
anti: anti:
type: type: