Bitnami/charts
2
0
Fork 0
mirror of https://github.com/bitnami/charts.git synced 2026-08-10 14:15:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add runAsNonRoot

Browse Source 
Signed-off-by: Javier J. Salmeron Garcia <jsalmeron@vmware.com>
This commit is contained in:
Javier J. Salmeron Garcia
2019-10-31 11:28:05 +01:00
parent ba7d2df3a9
commit 0e287798f4
7 changed files with 12 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bitnami/mongodb-sharded/README.md
+3 -2
View File
@@ -108,6 +108,7 @@ The following table lists the configurable parameters of the MongoDB chart and t
| `securityContext.enabled` | Enable security context | `true` |
| `securityContext.fsGroup` | Group ID for the container | `1001` |
| `securityContext.runAsUser` | User ID for the container | `1001` |
| `securityContext.runAsNonRoot` | Run containers as non-root users | `true` |
| `persistence.enabled` | Use a PVC to persist data | `true` |
| `persistence.mountPath` | Path to mount the volume at | `/bitnami/mongodb` |
| `persistence.subPath` | Subdirectory of the volume to mount at | `""` |
@@ -330,7 +331,7 @@ This chart deploys a sharded cluster by default. Some characteristics of this ch
### Initialize a fresh instance
The [Bitnami MongoDB](https://github.com/bitnami/bitnami-docker-mongodb) image allows you to use your custom scripts to initialize a fresh instance. You can create a custom config map and give it via `initScriptsCM`(check options for more details).
The [Bitnami MongoDB](https://github.com/bitnami/bitnami-docker-mongodb-sharded) image allows you to use your custom scripts to initialize a fresh instance. You can create a custom config map and give it via `initScriptsCM`(check options for more details).
The allowed extensions are `.sh`, and `.js`.
@@ -374,7 +375,7 @@ Alternatively, you can use a ConfigMap or a Secret with the environment variable
## Persistence
The [Bitnami MongoDB](https://github.com/bitnami/bitnami-docker-mongodb) image stores the MongoDB data and configurations at the `/bitnami/mongodb` path of the container.
The [Bitnami MongoDB](https://github.com/bitnami/bitnami-docker-mongodb-sharded) image stores the MongoDB data and configurations at the `/bitnami/mongodb` path of the container.
The chart mounts a [Persistent Volume](http://kubernetes.io/docs/user-guide/persistent-volumes/) at this location. The volume is created using dynamic volume provisioning.
bitnami/mongodb-sharded/templates/config-server/config-server-statefulset.yaml
+2 -2
View File
@@ -61,7 +61,7 @@ spec:
imagePullPolicy: {{ .Values.image.pullPolicy }}
{{- if .Values.securityContext.enabled }}
securityContext:
runAsNonRoot: true
runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
runAsUser: {{ .Values.securityContext.runAsUser }}
{{- end }}
ports:
@@ -216,7 +216,7 @@ spec:
imagePullPolicy: {{ .Values.metrics.image.pullPolicy | quote }}
{{- if .Values.securityContext.enabled }}
securityContext:
runAsNonRoot: true
runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
runAsUser: {{ .Values.securityContext.runAsUser }}
{{- end }}
env:
bitnami/mongodb-sharded/templates/mongos/mongos-deployment.yaml
+2 -2
View File
@@ -47,7 +47,7 @@ spec:
imagePullPolicy: {{ .Values.image.pullPolicy | quote }}
{{- if .Values.securityContext.enabled }}
securityContext:
runAsNonRoot: true
runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
runAsUser: {{ .Values.securityContext.runAsUser }}
{{- end }}
env:
@@ -204,7 +204,7 @@ spec:
imagePullPolicy: {{ .Values.metrics.image.pullPolicy | quote }}
{{- if .Values.securityContext.enabled }}
securityContext:
runAsNonRoot: true
runAsNonRoot: {{ .Values.securityContext.runAsNonRoot }}
runAsUser: {{ .Values.securityContext.runAsUser }}
{{- end }}
env:
bitnami/mongodb-sharded/templates/shard/shard-arbiter-statefulset.yaml
+1 -1
View File
@@ -51,7 +51,7 @@ spec:
imagePullPolicy: {{ $.Values.image.pullPolicy }}
{{- if $.Values.securityContext.enabled }}
securityContext:
runAsNonRoot: true
runAsNonRoot: {{ $.Values.securityContext.runAsNonRoot }}
runAsUser: {{ $.Values.securityContext.runAsUser }}
{{- end }}
ports:
bitnami/mongodb-sharded/templates/shard/shard-data-statefulset.yaml
+2 -2
View File
@@ -63,7 +63,7 @@ spec:
imagePullPolicy: {{ $.Values.image.pullPolicy }}
{{- if $.Values.securityContext.enabled }}
securityContext:
runAsNonRoot: true
runAsNonRoot: {{ $.Values.securityContext.runAsNonRoot }}
runAsUser: {{ $.Values.securityContext.runAsUser }}
{{- end }}
ports:
@@ -195,7 +195,7 @@ spec:
imagePullPolicy: {{ $.Values.metrics.image.pullPolicy | quote }}
{{- if $.Values.securityContext.enabled }}
securityContext:
runAsNonRoot: true
runAsNonRoot: {{ $.Values.securityContext.runAsNonRoot }}
runAsUser: {{ $.Values.securityContext.runAsUser }}
{{- end }}
env:
bitnami/mongodb-sharded/values-production.yaml
+1
View File
@@ -586,6 +586,7 @@ securityContext:
enabled: true
fsGroup: 1001
runAsUser: 1001
runAsNonRoot: true
## Kubernetes Cluster Domain
## ref: https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/#introduction
bitnami/mongodb-sharded/values.yaml
+1
View File
@@ -588,6 +588,7 @@ securityContext:
enabled: true
fsGroup: 1001
runAsUser: 1001
runAsNonRoot: true
## Kubernetes Cluster Domain
## ref: https://kubernetes.io/docs/tasks/administer-cluster/dns-custom-nameservers/#introduction