External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-03-06 11:11:07 -03:30
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7317 from shanemcd/redis-root-group

Browse Source 
Force containers in k8s to run under root group

Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
This commit is contained in:
softwarefactory-project-zuul[bot]
2020-06-16 23:41:42 +00:00
committed by GitHub
parent 90bcb6d145 423df6618d
commit 5ca66ac806
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
installer/roles/kubernetes/templates/configmap.yml.j2
View File

@@ -202,6 +202,6 @@ data:
{{ kubernetes_deployment_name }}_redis_conf: | {{ kubernetes_deployment_name }}_redis_conf: |
unixsocket /var/run/redis/redis.sock unixsocket /var/run/redis/redis.sock
unixsocketperm 777 unixsocketperm 660
port 0 port 0
bind 127.0.0.1 bind 127.0.0.1

2
installer/roles/kubernetes/templates/deployment.yml.j2
View File

@@ -104,6 +104,8 @@ spec:
app: {{ kubernetes_deployment_name }} app: {{ kubernetes_deployment_name }}
spec: spec:
serviceAccountName: awx serviceAccountName: awx
securityContext:
fsGroup: 0
terminationGracePeriodSeconds: 10 terminationGracePeriodSeconds: 10
{% if custom_venvs is defined %} {% if custom_venvs is defined %}
{% set trusted_hosts = "" %} {% set trusted_hosts = "" %}