Add security context to deployments interacting with pulp-file-storag…

…e PVC Add security context runAsUser and fsGroup to deployments interacting with pulp-file-storage PVC fixes #5142 https://pulp.plan.io/issues/5142
pulp · Feb 18, 2021 · 8d82b82 · 8d82b82
1 parent 1f31f56
commit 8d82b82
Show file tree

Hide file tree

Showing 5 changed files with 13 additions and 0 deletions.
diff --git a/CHANGES/5142.misc b/CHANGES/5142.misc
@@ -0,0 +1 @@
+Add security context runAsUser and fsGroup to deployments interacting with pulp-file-storage PVC
diff --git a/roles/pulp-api/templates/pulp-api.deployment.yaml.j2 b/roles/pulp-api/templates/pulp-api.deployment.yaml.j2
@@ -16,6 +16,9 @@ spec:
       labels:
         app: pulp-api
     spec:
+      securityContext:
+        runAsUser: 0
+        fsGroup: 0
       #serviceAccountName: "{{ project_name }}-anyuid"
       volumes:
         - name: pulp-server

diff --git a/roles/pulp-content/templates/pulp-content.deployment.yaml.j2 b/roles/pulp-content/templates/pulp-content.deployment.yaml.j2
@@ -16,6 +16,9 @@ spec:
       labels:
         app: pulp-content
     spec:
+      securityContext:
+        runAsUser: 0
+        fsGroup: 0
       #serviceAccountName: "{{ project_name }}-anyuid"
       volumes:
         - name: pulp-server

diff --git a/roles/pulp-resource-manager/templates/pulp-resource-manager.deployment.yaml.j2 b/roles/pulp-resource-manager/templates/pulp-resource-manager.deployment.yaml.j2
@@ -16,6 +16,9 @@ spec:
       labels:
         app: pulp-resource-manager
     spec:
+      securityContext:
+        runAsUser: 0
+        fsGroup: 0
       #serviceAccountName: "{{ project_name }}-anyuid"
       volumes:
         - name: pulp-server

diff --git a/roles/pulp-worker/templates/pulp-worker.deployment.yaml.j2 b/roles/pulp-worker/templates/pulp-worker.deployment.yaml.j2
@@ -16,6 +16,9 @@ spec:
       labels:
         app: pulp-worker
     spec:
+      securityContext:
+        runAsUser: 0
+        fsGroup: 0
       #serviceAccountName: "{{ project_name }}-anyuid"
       volumes:
         - name: pulp-server