Michal.Wrobel/openbao-helm
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Remove IPC_LOCK capability (#198)

Browse source 
* Remove IPC_LOCK capability

* Remove tests for IPC_LOCK
This commit is contained in:
Petter Abrahamsson 2020-04-09 12:47:17 -04:00 committed by GitHub
parent 13f6df4e6a
commit 497daa5f60
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 0 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
templates/server-statefulset.yaml
View file

@ -52,9 +52,6 @@ spec:
containers: containers:
- name: vault - name: vault
{{ template "vault.resources" . }} {{ template "vault.resources" . }}
securityContext:
capabilities:
add: ["IPC_LOCK"]
image: {{ .Values.server.image.repository }}:{{ .Values.server.image.tag | default "latest" }} image: {{ .Values.server.image.repository }}:{{ .Values.server.image.tag | default "latest" }}
imagePullPolicy: {{ .Values.server.image.pullPolicy }} imagePullPolicy: {{ .Values.server.image.pullPolicy }}
command: {{ template "vault.command" . }} command: {{ template "vault.command" . }}

5
test/acceptance/server-ha.bats
View file

@ -18,11 +18,6 @@ load _helpers
jq -r '.initialized') jq -r '.initialized')
[ "${init_status}" == "false" ] [ "${init_status}" == "false" ]
# Security
local ipc=$(kubectl get statefulset "$(name_prefix)" --output json |
jq -r '.spec.template.spec.containers[0].securityContext.capabilities.add[0]')
[ "${ipc}" == "IPC_LOCK" ]
# Replicas # Replicas
local replicas=$(kubectl get statefulset "$(name_prefix)" --output json | local replicas=$(kubectl get statefulset "$(name_prefix)" --output json |
jq -r '.spec.replicas') jq -r '.spec.replicas')

5
test/acceptance/server.bats
View file

@ -21,11 +21,6 @@ load _helpers
jq -r '.initialized') jq -r '.initialized')
[ "${init_status}" == "false" ] [ "${init_status}" == "false" ]
# Security
local ipc=$(kubectl get statefulset "$(name_prefix)" --output json |
jq -r '.spec.template.spec.containers[0].securityContext.capabilities.add[0]')
[ "${ipc}" == "IPC_LOCK" ]
# Replicas # Replicas
local replicas=$(kubectl get statefulset "$(name_prefix)" --output json | local replicas=$(kubectl get statefulset "$(name_prefix)" --output json |
jq -r '.spec.replicas') jq -r '.spec.replicas')