Merge pull request #7317 from shanemcd/redis-root-group

Force containers in k8s to run under root group

Reviewed-by: https://github.com/apps/softwarefactory-project-zuul

installer/roles/kubernetes/templates/configmap.yml.j2

@@ -202,6 +202,6 @@ data:
 
   {{ kubernetes_deployment_name }}_redis_conf: |
     unixsocket /var/run/redis/redis.sock
-    unixsocketperm 777
+    unixsocketperm 660
     port 0
     bind 127.0.0.1

installer/roles/kubernetes/templates/deployment.yml.j2

@@ -104,6 +104,8 @@ spec:
         app: {{ kubernetes_deployment_name }}
     spec:
       serviceAccountName: awx
+      securityContext:
+        fsGroup: 0
       terminationGracePeriodSeconds: 10
 {% if custom_venvs is defined %}
 {% set trusted_hosts = "" %}