Mirroristas/bigchaindb
2
0
Fork 0
mirror of https://github.com/bigchaindb/bigchaindb.git synced 2024-10-13 13:34:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Run mongodb monitoring and backup agents as non-root user

Browse Source 
- We need to modify the read permissions on the secrets and allow
the mongodb-mms-agent to read the credentials.
This commit is contained in:
Muawia Khan 2017-08-15 15:59:08 +02:00
parent e7640feaec
commit 650177c50e
4 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
k8s/mongodb-backup-agent/container/Dockerfile
View File

@ -20,5 +20,5 @@ RUN apt update \
COPY mongodb_backup_agent_entrypoint.bash / COPY mongodb_backup_agent_entrypoint.bash /
RUN chown -R mongodb-mms-agent:mongodb-mms-agent /etc/mongodb-mms/ RUN chown -R mongodb-mms-agent:mongodb-mms-agent /etc/mongodb-mms/
VOLUME /etc/mongod/ssl VOLUME /etc/mongod/ssl
#USER mongodb-mms-agent - BUG(Krish) Uncomment after tests are complete USER mongodb-mms-agent
ENTRYPOINT ["/mongodb_backup_agent_entrypoint.bash"] ENTRYPOINT ["/mongodb_backup_agent_entrypoint.bash"]

4
k8s/mongodb-backup-agent/mongo-backup-dep.yaml
View File

@ -51,8 +51,8 @@ spec:
- name: mdb-bak-certs - name: mdb-bak-certs
secret: secret:
secretName: mdb-bak-certs secretName: mdb-bak-certs
defaultMode: 0400 defaultMode: 0404
- name: cloud-manager-credentials - name: cloud-manager-credentials
secret: secret:
secretName: cloud-manager-credentials secretName: cloud-manager-credentials
defaultMode: 0400 defaultMode: 0404

2
k8s/mongodb-monitoring-agent/container/Dockerfile
View File

@ -54,5 +54,5 @@ RUN apt update \
COPY mongodb_mon_agent_entrypoint.bash / COPY mongodb_mon_agent_entrypoint.bash /
RUN chown -R mongodb-mms-agent:mongodb-mms-agent /etc/mongodb-mms/ RUN chown -R mongodb-mms-agent:mongodb-mms-agent /etc/mongodb-mms/
VOLUME /etc/mongod/ssl VOLUME /etc/mongod/ssl
#USER mongodb-mms-agent - BUG(Krish) Uncomment after tests are complete USER mongodb-mms-agent
ENTRYPOINT ["/mongodb_mon_agent_entrypoint.bash"] ENTRYPOINT ["/mongodb_mon_agent_entrypoint.bash"]

4
k8s/mongodb-monitoring-agent/mongo-mon-dep.yaml
View File

@ -51,8 +51,8 @@ spec:
- name: mdb-mon-certs - name: mdb-mon-certs
secret: secret:
secretName: mdb-mon-certs secretName: mdb-mon-certs
defaultMode: 0400 defaultMode: 0404
- name: cloud-manager-credentials - name: cloud-manager-credentials
secret: secret:
secretName: cloud-manager-credentials secretName: cloud-manager-credentials
defaultMode: 0400 defaultMode: 0404