Merge pull request #22 from stefanprodan/prom-pv-fix

Fix Prometheus persistent volume mount ownership
aws · Oct 23, 2019 · ba7968b · ba7968b
2 parents 26bcbea + e620ee4
commit ba7968b
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/stable/appmesh-prometheus/templates/deployment.yaml b/stable/appmesh-prometheus/templates/deployment.yaml
@@ -32,6 +32,15 @@ spec:
         {{- else }}
         emptyDir: {}
         {{- end }}
+      initContainers:
+        - name: chown
+          image: alpine:latest
+          command: ["/bin/sh", "-c"]
+          args:
+            - chown 65534:65534 /mount;
+          volumeMounts:
+            - name: data-volume
+              mountPath: /mount
       containers:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
@@ -51,6 +60,10 @@ spec:
             httpGet:
               path: /-/ready
               port: http
+          securityContext:
+            runAsUser: 65534
+            runAsGroup: 65534
+            runAsNonRoot: true
           volumeMounts:
             - name: config-volume
               mountPath: /etc/prometheus