From b704b9ad025470d926bf31fef35649fdb835ff1f Mon Sep 17 00:00:00 2001 From: "Parsons, Cliff (cp769u)" Date: Fri, 27 Aug 2021 20:53:52 +0000 Subject: [PATCH] Ceph OSD log-runner container should run as ceph user This PS changes the log-runner user ID to run as the ceph user so that it has the appropriate permissions to write to /var/log/ceph files. Change-Id: I4dfd956130eb3a19ca49a21145b67faf88750d6f --- ceph-osd/Chart.yaml | 2 +- ceph-osd/values.yaml | 3 ++- releasenotes/notes/ceph-osd.yaml | 1 + 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/ceph-osd/Chart.yaml b/ceph-osd/Chart.yaml index b9150f552..e0fabacd9 100644 --- a/ceph-osd/Chart.yaml +++ b/ceph-osd/Chart.yaml @@ -15,6 +15,6 @@ apiVersion: v1 appVersion: v1.0.0 description: OpenStack-Helm Ceph OSD name: ceph-osd -version: 0.1.29 +version: 0.1.30 home: https://github.com/ceph/ceph ... diff --git a/ceph-osd/values.yaml b/ceph-osd/values.yaml index 7277a73c1..e0c386826 100644 --- a/ceph-osd/values.yaml +++ b/ceph-osd/values.yaml @@ -71,7 +71,8 @@ pod: privileged: true readOnlyRootFilesystem: true log_runner: - runAsUser: 65534 + # run as "ceph" user + runAsUser: 64045 allowPrivilegeEscalation: false readOnlyRootFilesystem: true bootstrap: diff --git a/releasenotes/notes/ceph-osd.yaml b/releasenotes/notes/ceph-osd.yaml index 898977226..02081a3be 100644 --- a/releasenotes/notes/ceph-osd.yaml +++ b/releasenotes/notes/ceph-osd.yaml @@ -30,4 +30,5 @@ ceph-osd: - 0.1.27 Limit Ceph OSD Container Security Contexts - 0.1.28 Change var crash mount propagation to HostToContainer - 0.1.29 Fix Ceph checkDNS script + - 0.1.30 Ceph OSD log-runner container should run as ceph user ...