External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-01-11 18:09:57 -03:30
Code Issues Packages Projects Releases Wiki Activity

Force containers in k8s to run under root group

Browse Source 
Normally containers belong to the 'root' group, but for some reason the
downstream red hat scl redis image only belongs to the 'redis' group by default. This fixes that.
This commit is contained in:
Shane McDonald 2020-06-10 13:35:41 -04:00
parent 3952946d9c
commit 423df6618d
No known key found for this signature in database
GPG Key ID: 6F374AF6E9EB9374
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
installer/roles/kubernetes/templates/configmap.yml.j2
View File

@ -202,6 +202,6 @@ data:
{{ kubernetes_deployment_name }}_redis_conf: |
unixsocket /var/run/redis/redis.sock
unixsocketperm 777
unixsocketperm 660
port 0
bind 127.0.0.1

2
installer/roles/kubernetes/templates/deployment.yml.j2
View File

@ -40,6 +40,8 @@ spec:
app: {{ kubernetes_deployment_name }}
spec:
serviceAccountName: awx
securityContext:
fsGroup: 0
terminationGracePeriodSeconds: 10
{% if custom_venvs is defined %}
{% set trusted_hosts = "" %}