diff --git a/stable/rabbitmq-ha/Chart.yaml b/stable/rabbitmq-ha/Chart.yaml index e02cf86893..280910fba3 100644 --- a/stable/rabbitmq-ha/Chart.yaml +++ b/stable/rabbitmq-ha/Chart.yaml @@ -1,7 +1,7 @@ name: rabbitmq-ha apiVersion: v1 appVersion: 3.8.0 -version: 1.42.0 +version: 1.43.0 description: Highly available RabbitMQ cluster, the open source message broker software that implements the Advanced Message Queuing Protocol (AMQP). keywords: diff --git a/stable/rabbitmq-ha/templates/statefulset.yaml b/stable/rabbitmq-ha/templates/statefulset.yaml index 08f6c8a91b..d10814aa67 100644 --- a/stable/rabbitmq-ha/templates/statefulset.yaml +++ b/stable/rabbitmq-ha/templates/statefulset.yaml @@ -69,6 +69,11 @@ spec: - name: bootstrap image: {{ .Values.busyboxImage.repository}}:{{ .Values.busyboxImage.tag}} imagePullPolicy: {{ .Values.busyboxImage.pullPolicy }} + securityContext: + fsGroup: 0 + runAsGroup: 0 + runAsNonRoot: false + runAsUser: 0 command: ['sh'] args: - "-c" @@ -81,6 +86,10 @@ spec: touch "${RABBITMQ_MNESIA_DIR}/force_load" fi {{- end }} + {{- if and (.Values.securityContext.runAsUser) (.Values.securityContext.fsGroup) }} + chown -R {{ .Values.securityContext.runAsUser }}:{{ .Values.securityContext.fsGroup }} /var/lib/rabbitmq/ + chown -R {{ .Values.securityContext.runAsUser }}:{{ .Values.securityContext.fsGroup }} /etc/rabbitmq + {{- end }} env: - name: POD_NAME valueFrom: