Skip to content

Commit

Permalink
Merge pull request #60 from pmoscode/fix/helm-user-group
Browse files Browse the repository at this point in the history
fix: fix helm user and group
  • Loading branch information
SebastianBezold authored Aug 23, 2023
2 parents 14c14cd + 3d90ba4 commit c4dffac
Show file tree
Hide file tree
Showing 3 changed files with 10 additions and 6 deletions.
8 changes: 6 additions & 2 deletions charts/managed-identity-wallet/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -111,6 +111,7 @@ See [helm upgrade](https://helm.sh/docs/helm/helm_upgrade/) for command document
| keycloak.postgresql.enabled | bool | `true` | Enable to deploy PostgreSQL |
| keycloak.postgresql.nameOverride | string | `"keycloak-postgresql"` | Name of the PostgreSQL chart to deploy. Mandatory when the MIW deploys a PostgreSQL chart, too. |
| miw.authorityWallet.bpn | string | `"BPNL000000000000"` | Authority Wallet BPNL |
| miw.authorityWallet.name | string | `""` | Authority Wallet Name |
| miw.database.encryptionKey.secret | string | `""` | Existing secret for database encryption key |
| miw.database.encryptionKey.secretKey | string | `""` | Existing secret key for database encryption key |
| miw.database.encryptionKey.value | string | `""` | Database encryption key for confidential data. Ignored if `secret` is set. If empty a secret with 32 random alphanumeric chars is generated. |
Expand Down Expand Up @@ -151,9 +152,9 @@ See [helm upgrade](https://helm.sh/docs/helm/helm_upgrade/) for command document
| secrets | object | `{}` | Parameters for the application (will be stored as secrets - so, for passwords, ...) |
| securityContext.allowPrivilegeEscalation | bool | `false` | Allow privilege escalation |
| securityContext.privileged | bool | `false` | Enable privileged container |
| securityContext.runAsGroup | int | `0` | Group ID used to run the container |
| securityContext.runAsGroup | int | `11111` | Group ID used to run the container |
| securityContext.runAsNonRoot | bool | `true` | Enable to run the container as a non-root user |
| securityContext.runAsUser | int | `1001` | User ID used to run the container |
| securityContext.runAsUser | int | `11111` | User ID used to run the container |
| service.port | int | `8080` | Kubernetes Service port |
| service.type | string | `"ClusterIP"` | Kubernetes Service type |
| serviceAccount.annotations | object | `{}` | Annotations to add to the ServiceAccount |
Expand Down Expand Up @@ -198,6 +199,7 @@ The following two secrets are required to deploy the MIW in a production environ

- Database Password
- Database Encryption Key

The **Database Password Secret** stores the password associated with the PostgreSQL database user.

Meanwhile, the **Database Encryption Key Secret** holds the encryption key for safeguarding confidential data within the PostgreSQL database. This could include sensitive information such as private keys for wallets.
Expand Down Expand Up @@ -232,3 +234,5 @@ when deploying the MIW in a production environment:

<p align="right">(<a href="#readme-top">back to top</a>)</p>

----------------------------------------------
Autogenerated from chart metadata using [helm-docs v1.11.0](https://github.com/norwoodj/helm-docs/releases/v1.11.0)
Original file line number Diff line number Diff line change
Expand Up @@ -89,9 +89,9 @@ tests:
content:
allowPrivilegeEscalation: false
privileged: false
runAsGroup: 0
runAsGroup: 11111
runAsNonRoot: true
runAsUser: 1001
runAsUser: 11111

- it: should have environment variables set
asserts:
Expand Down
4 changes: 2 additions & 2 deletions charts/managed-identity-wallet/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -76,9 +76,9 @@ securityContext:
# -- Allow privilege escalation
allowPrivilegeEscalation: false
# -- User ID used to run the container
runAsUser: 1001
runAsUser: 11111
# -- Group ID used to run the container
runAsGroup: 0
runAsGroup: 11111
# -- Enable to run the container as a non-root user
runAsNonRoot: true

Expand Down

0 comments on commit c4dffac

Please sign in to comment.