From f59d3b0011beb9cd7acab6780f952a4ac903d6f5 Mon Sep 17 00:00:00 2001 From: portdirect Date: Wed, 10 Jan 2018 12:43:06 -0500 Subject: [PATCH] Prometheus: Fix permisions for PVC This PS fixes the permisions for the PVC backing Prometheus Change-Id: I19b96296fe3553df5b433c22c05cbdfff1b8402a --- prometheus/templates/statefulset.yaml | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/prometheus/templates/statefulset.yaml b/prometheus/templates/statefulset.yaml index 9bb2955ef8..52506b638b 100644 --- a/prometheus/templates/statefulset.yaml +++ b/prometheus/templates/statefulset.yaml @@ -51,6 +51,19 @@ spec: terminationGracePeriodSeconds: {{ .Values.pod.lifecycle.termination_grace_period.prometheus.timeout | default "30" }} initContainers: {{ tuple $envAll .Values.pod_dependency list | include "helm-toolkit.snippets.kubernetes_entrypoint_init_container" | indent 8 }} + - name: prometheus-perms +{{ tuple $envAll "prometheus" | include "helm-toolkit.snippets.image" | indent 10 }} + securityContext: + runAsUser: 0 +{{ tuple $envAll $envAll.Values.pod.resources.prometheus | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }} + command: + - chown + - -R + - "nobody:" + - /var/lib/prometheus/data + volumeMounts: + - name: storage + mountPath: /var/lib/prometheus/data containers: - name: prometheus {{ tuple $envAll "prometheus" | include "helm-toolkit.snippets.image" | indent 10 }}