commit 53480c39f04bdfb7ce7b396290f2b441d23d696b Author: KHIYANI, RAHUL (rk0850) Date: Tue Oct 13 16:25:32 2020 -0500 Add missing pod/container flags to alerta Adding runAsUser and readOnly-fs flag to alerta pod/container. The security context templates are added here: https://github.com/openstack/openstack-helm-infra/blob/master/alerta/templates/deployment.yaml#L52 Change-Id: I1136f776ffd7caf54310288a162563ef4e565bbe diff --git a/alerta/Chart.yaml b/alerta/Chart.yaml index 07a27d8..c76c960 100644 --- a/alerta/Chart.yaml +++ b/alerta/Chart.yaml @@ -15,7 +15,7 @@ apiVersion: v1 appVersion: v8.0.2 description: OpenStack-Helm Alerta for Alertmanager. name: alerta -version: 0.1.3 +version: 0.1.4 home: https://github.com/alerta/alerta sources: - https://github.com/alerta/alerta diff --git a/alerta/values.yaml b/alerta/values.yaml index 21ce99f..b0d7b13 100644 --- a/alerta/values.yaml +++ b/alerta/values.yaml @@ -72,6 +72,12 @@ pod: postgresql_create_db: readOnlyRootFilesystem: true allowPrivilegeEscalation: false + server: + pod: + runAsUser: 0 + container: + alerta: + readOnlyRootFilesystem: false affinity: anti: type: