diff --git a/barbican/templates/deployment-api.yaml b/barbican/templates/deployment-api.yaml index f0cb336012..259b34e844 100644 --- a/barbican/templates/deployment-api.yaml +++ b/barbican/templates/deployment-api.yaml @@ -46,6 +46,8 @@ spec: image: {{ .Values.images.api }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.api | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.barbican.uid }} command: - /tmp/barbican.sh - start diff --git a/barbican/values.yaml b/barbican/values.yaml index 74433dac03..60334ee901 100644 --- a/barbican/values.yaml +++ b/barbican/values.yaml @@ -29,6 +29,9 @@ images: pull_policy: "IfNotPresent" pod: + user: + barbican: + uid: 1000 affinity: anti: type: diff --git a/mistral/templates/deployment-api.yaml b/mistral/templates/deployment-api.yaml index 1d6bfde70e..3e6795a9d5 100644 --- a/mistral/templates/deployment-api.yaml +++ b/mistral/templates/deployment-api.yaml @@ -47,6 +47,8 @@ spec: image: {{ .Values.images.api }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.api | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.mistral.uid }} command: - /tmp/mistral-api.sh - start diff --git a/mistral/templates/deployment-executor.yaml b/mistral/templates/deployment-executor.yaml index a4485a96d8..b33c6bdf3b 100644 --- a/mistral/templates/deployment-executor.yaml +++ b/mistral/templates/deployment-executor.yaml @@ -46,6 +46,8 @@ spec: image: {{ .Values.images.executor }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.executor | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.mistral.uid }} command: - /tmp/mistral-executor.sh volumeMounts: diff --git a/mistral/templates/statefulset-engine.yaml b/mistral/templates/statefulset-engine.yaml index 67d562e534..a1bbb3b080 100644 --- a/mistral/templates/statefulset-engine.yaml +++ b/mistral/templates/statefulset-engine.yaml @@ -41,6 +41,8 @@ spec: image: {{ .Values.images.engine }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.engine | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.mistral.uid }} command: - /tmp/mistral-engine.sh volumeMounts: diff --git a/mistral/templates/statefulset-event-engine.yaml b/mistral/templates/statefulset-event-engine.yaml index 1ac63ea2df..d2022d2cb6 100644 --- a/mistral/templates/statefulset-event-engine.yaml +++ b/mistral/templates/statefulset-event-engine.yaml @@ -43,6 +43,8 @@ spec: image: {{ .Values.images.event_engine }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.event_engine | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.mistral.uid }} command: - /tmp/mistral-event-engine.sh volumeMounts: