template/stacks/ref-implementation/openbao-logging/grant-priviledges-to-logrotate.yaml

@@ -0,0 +1,25 @@
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: logrotate-priveledges
+  namespace: openbao
+spec:
+  selector:
+    matchLabels:
+      app: ologrotate-priveledges
+  template:
+    metadata:
+      labels:
+        app: logrotate-priveledges
+    spec:
+      initContainers:
+      - name: creator
+        image: busybox
+        command: ["/bin/sh", "-c", "useradd -u 100 logrotate && tail -f /dev/null", "chown logrotate:logrotate /var/lib/logrotate.status"]          
+        securityContext:
+          runAsUser: 0 
+      containers:
+      - name: running-container
+        image: busybox
+        command: ["sleep", "infinity"]
+      restartPolicy: Never