From c849a3bb3dcb76de37827e4f52cd5b2e8e7b618c Mon Sep 17 00:00:00 2001 From: Michel Thebeau Date: Mon, 22 Jul 2024 13:14:17 +0000 Subject: [PATCH] vault-manager: run as non-root user Use the docker image with default USER 'manager'. Test Plan: PASS: vault application sanity PASS: the correct image is used PASS: vault-manager processes are run as 'manager' user Depends-on: I52aafcdc86eb0e043b033fe163b6a71942f5d53d Change-Id: If9bc0fb4d0701e459ca4cc98a80d3542f7d6244d Signed-off-by: Michel Thebeau --- .../vault-manager-helm/vault-manager/values.yaml | 2 +- .../vault-manager/vault-manager-static-overrides.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/helm-charts/custom/vault-manager-helm/vault-manager-helm/vault-manager/values.yaml b/helm-charts/custom/vault-manager-helm/vault-manager-helm/vault-manager/values.yaml index 565f521..e0e012b 100644 --- a/helm-charts/custom/vault-manager-helm/vault-manager-helm/vault-manager/values.yaml +++ b/helm-charts/custom/vault-manager-helm/vault-manager-helm/vault-manager/values.yaml @@ -18,7 +18,7 @@ server: manager: image: repository: starlingx/stx-vault-manager - tag: stx.10.0-v1.29.6 + tag: stx.10.0-v1.29.6-1 pullPolicy: IfNotPresent chart: vault_0.6.0 diff --git a/stx-vault-helm/stx-vault-helm/fluxcd-manifests/vault-manager/vault-manager-static-overrides.yaml b/stx-vault-helm/stx-vault-helm/fluxcd-manifests/vault-manager/vault-manager-static-overrides.yaml index cf19ae7..a3b3bd1 100644 --- a/stx-vault-helm/stx-vault-helm/fluxcd-manifests/vault-manager/vault-manager-static-overrides.yaml +++ b/stx-vault-helm/stx-vault-helm/fluxcd-manifests/vault-manager/vault-manager-static-overrides.yaml @@ -7,7 +7,7 @@ manager: image: repository: starlingx/stx-vault-manager - tag: stx.10.0-v1.29.6 + tag: stx.10.0-v1.29.6-1 tolerations: | - key: "node-role.kubernetes.io/master" operator: "Exists"