airship
/
promenade
Code Issues Proposed changes

(fix) haproxy anchor runs as root 

- The anchor pod for haproxy writes to the host
  disk and in order to manage file permissions
  should run as root. Without this fix, the
  haproxy chart is not resilient to node failure.

Change-Id: I9ea9b9a1a2a760be2b3ebb38bd45ead8aaefa034
This commit is contained in:
Hussey, Scott (sh8121) 2019-06-26 13:39:55 -05:00
parent fe60268244
commit a9faafecf8
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
charts/haproxy/values.yaml
View File

@ -83,6 +83,7 @@ pod:
runAsUser: 65534
container:
anchor:
runAsUser: 0
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
lifecycle: