diff --git a/glance/templates/deployment-api.yaml b/glance/templates/deployment-api.yaml index 740a8246..d7d3d4ad 100644 --- a/glance/templates/deployment-api.yaml +++ b/glance/templates/deployment-api.yaml @@ -62,6 +62,8 @@ spec: - name: ceph-keyring-placement image: {{ .Values.images.api }} imagePullPolicy: {{ .Values.images.pull_policy }} + securityContext: + runAsUser: {{ .Values.pod.user.glance.uid }} command: - /tmp/ceph-keyring.sh volumeMounts: @@ -81,6 +83,8 @@ spec: image: {{ .Values.images.api }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.api | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.glance.uid }} command: - /tmp/glance-api.sh - start diff --git a/glance/templates/deployment-registry.yaml b/glance/templates/deployment-registry.yaml index ce6b2062..5d977542 100644 --- a/glance/templates/deployment-registry.yaml +++ b/glance/templates/deployment-registry.yaml @@ -47,6 +47,8 @@ spec: image: {{ .Values.images.registry }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.registry | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.glance.uid }} command: - /tmp/glance-registry.sh - start diff --git a/glance/values.yaml b/glance/values.yaml index a2449d0f..a2411089 100644 --- a/glance/values.yaml +++ b/glance/values.yaml @@ -318,6 +318,9 @@ endpoints: default: 5672 pod: + user: + glance: + uid: 1000 affinity: anti: type: diff --git a/heat/templates/deployment-api.yaml b/heat/templates/deployment-api.yaml index 7624b33b..353f47c6 100644 --- a/heat/templates/deployment-api.yaml +++ b/heat/templates/deployment-api.yaml @@ -47,6 +47,8 @@ spec: image: {{ .Values.images.api }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.api | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.heat.uid }} command: - /tmp/heat-api.sh - start diff --git a/heat/templates/deployment-cfn.yaml b/heat/templates/deployment-cfn.yaml index b9f22c31..92b3bea8 100644 --- a/heat/templates/deployment-cfn.yaml +++ b/heat/templates/deployment-cfn.yaml @@ -47,6 +47,8 @@ spec: image: {{ .Values.images.cfn }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.cfn | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.heat.uid }} command: - /tmp/heat-cfn.sh - start diff --git a/heat/templates/deployment-cloudwatch.yaml b/heat/templates/deployment-cloudwatch.yaml index 2618c16e..3e86100b 100644 --- a/heat/templates/deployment-cloudwatch.yaml +++ b/heat/templates/deployment-cloudwatch.yaml @@ -47,6 +47,8 @@ spec: image: {{ .Values.images.cloudwatch }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.cloudwatch | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.heat.uid }} command: - /tmp/heat-cloudwatch.sh - start diff --git a/heat/templates/statefulset-engine.yaml b/heat/templates/statefulset-engine.yaml index f55980d6..1fa82454 100644 --- a/heat/templates/statefulset-engine.yaml +++ b/heat/templates/statefulset-engine.yaml @@ -43,6 +43,8 @@ spec: image: {{ .Values.images.engine }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.engine | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.heat.uid }} command: - /tmp/heat-engine.sh volumeMounts: diff --git a/heat/values.yaml b/heat/values.yaml index bc4addab..d647f28d 100644 --- a/heat/values.yaml +++ b/heat/values.yaml @@ -333,6 +333,9 @@ endpoints: default: 5672 pod: + user: + heat: + uid: 1000 affinity: anti: type: diff --git a/magnum/templates/deployment-api.yaml b/magnum/templates/deployment-api.yaml index dec66ce2..dce937f1 100644 --- a/magnum/templates/deployment-api.yaml +++ b/magnum/templates/deployment-api.yaml @@ -47,6 +47,8 @@ spec: image: {{ .Values.images.api }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.api | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.magnum.uid }} command: - /tmp/magnum-api.sh - start diff --git a/magnum/templates/statefulset-conductor.yaml b/magnum/templates/statefulset-conductor.yaml index 87d5870d..5944b393 100644 --- a/magnum/templates/statefulset-conductor.yaml +++ b/magnum/templates/statefulset-conductor.yaml @@ -43,6 +43,8 @@ spec: image: {{ .Values.images.conductor }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.conductor | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.magnum.uid }} command: - /tmp/magnum-conductor.sh volumeMounts: diff --git a/magnum/values.yaml b/magnum/values.yaml index a13333c7..a06725a5 100644 --- a/magnum/values.yaml +++ b/magnum/values.yaml @@ -209,6 +209,9 @@ endpoints: default: 5672 pod: + user: + magnum: + uid: 1000 affinity: anti: type: diff --git a/mistral/values.yaml b/mistral/values.yaml index ed514067..80bf8bde 100644 --- a/mistral/values.yaml +++ b/mistral/values.yaml @@ -240,6 +240,9 @@ conf: memcache_security_strategy: ENCRYPT pod: + user: + mistral: + uid: 1000 affinity: anti: type: diff --git a/senlin/templates/deployment-api.yaml b/senlin/templates/deployment-api.yaml index 136efe1e..8da4d80a 100644 --- a/senlin/templates/deployment-api.yaml +++ b/senlin/templates/deployment-api.yaml @@ -47,6 +47,8 @@ spec: image: {{ .Values.images.api }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.api | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.senlin.uid }} command: - /tmp/senlin-api.sh - start diff --git a/senlin/templates/statefulset-engine.yaml b/senlin/templates/statefulset-engine.yaml index 65b958c6..61e7546f 100644 --- a/senlin/templates/statefulset-engine.yaml +++ b/senlin/templates/statefulset-engine.yaml @@ -43,6 +43,8 @@ spec: image: {{ .Values.images.engine }} imagePullPolicy: {{ .Values.images.pull_policy }} {{ tuple $envAll $envAll.Values.pod.resources.engine | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + securityContext: + runAsUser: {{ .Values.pod.user.senlin.uid }} command: - /tmp/senlin-engine.sh volumeMounts: diff --git a/senlin/values.yaml b/senlin/values.yaml index 1208e69a..77608728 100644 --- a/senlin/values.yaml +++ b/senlin/values.yaml @@ -209,6 +209,9 @@ endpoints: default: 5672 pod: + user: + senlin: + uid: 1000 affinity: anti: type: