starlingx/vault-armada-app
Code Issues Proposed changes

mount-helper: run as root

Browse Source 
When performing upgrade, conversion of the PVC storage to k8s secrets
requires the helper pod to run as root in order to delete the files in
the volume.  The old vault-manager pod was running as root.

Commit c849a3bb did not account for this and did not test
application-update.

Test Plan:
PASS  platform, application upgrade
PASS  unit test, manual execution of the procedure with pvc-attach.yaml

Story: 2011073
Task: 50522

Change-Id: I9ab340544408e9478e6fce68d78337d2fded9a09
Signed-off-by: Michel Thebeau <Michel.Thebeau@windriver.com>
This commit is contained in:
Michel Thebeau 2024-08-08 21:12:28 +00:00
parent 0b50363b36
commit 96c265ed20
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
helm-charts/custom/vault-manager-helm/vault-manager-helm/vault-manager/templates/vault-init.yaml
View File

@ -3796,6 +3796,9 @@ data:
tolerations:
{{- tpl .Values.manager.tolerations . | nindent 12 }}
{{- end }}
securityContext:
runAsUser: 0
runAsGroup: 0
containers:
- name: mount
image: "{{ .Values.manager.image.repository }}:{{ .Values.manager.image.tag }}"