From 8558ba35b47e9995a0c4023011e8446dcfbc29d2 Mon Sep 17 00:00:00 2001 From: Brady Todhunter Date: Fri, 11 Oct 2019 10:15:43 -0700 Subject: [PATCH] [stable/anchore-engine] update chart to anchore engine v0.5.1 (#17905) * add securityContext to all deployments to run as anchore:anchore Signed-off-by: Brady Todhunter * version bump to anchore-engine v0.5.1 Signed-off-by: Brady Todhunter --- stable/anchore-engine/Chart.yaml | 4 ++-- stable/anchore-engine/templates/analyzer_deployment.yaml | 3 +++ stable/anchore-engine/templates/api_deployment.yaml | 3 +++ stable/anchore-engine/templates/catalog_deployment.yaml | 3 +++ .../anchore-engine/templates/enterprise_feeds_deployment.yaml | 3 +++ stable/anchore-engine/templates/enterprise_ui_deployment.yaml | 3 +++ stable/anchore-engine/templates/policy_engine_deployment.yaml | 3 +++ stable/anchore-engine/templates/simplequeue_deployment.yaml | 3 +++ stable/anchore-engine/values.yaml | 2 +- 9 files changed, 24 insertions(+), 3 deletions(-) diff --git a/stable/anchore-engine/Chart.yaml b/stable/anchore-engine/Chart.yaml index 31a917a61b..9a745088d7 100644 --- a/stable/anchore-engine/Chart.yaml +++ b/stable/anchore-engine/Chart.yaml @@ -1,7 +1,7 @@ apiVersion: v1 name: anchore-engine -version: 1.3.2 -appVersion: 0.5.0 +version: 1.3.3 +appVersion: 0.5.1 description: Anchore container analysis and policy evaluation engine service keywords: - analysis diff --git a/stable/anchore-engine/templates/analyzer_deployment.yaml b/stable/anchore-engine/templates/analyzer_deployment.yaml index 89d6a7f70e..345cd4bc1f 100644 --- a/stable/anchore-engine/templates/analyzer_deployment.yaml +++ b/stable/anchore-engine/templates/analyzer_deployment.yaml @@ -37,6 +37,9 @@ spec: {{ toYaml . | nindent 8 }} {{- end }} spec: + securityContext: + runAsUser: 1000 + runAsGroup: 1000 containers: {{- if .Values.cloudsql.enabled }} - name: cloudsql-proxy diff --git a/stable/anchore-engine/templates/api_deployment.yaml b/stable/anchore-engine/templates/api_deployment.yaml index 08a9949294..8a9abf67ae 100644 --- a/stable/anchore-engine/templates/api_deployment.yaml +++ b/stable/anchore-engine/templates/api_deployment.yaml @@ -37,6 +37,9 @@ spec: {{ toYaml . | nindent 8 }} {{- end }} spec: + securityContext: + runAsUser: 1000 + runAsGroup: 1000 {{ if and .Values.anchoreEnterpriseGlobal.enabled (or .Values.anchoreEnterpriseRbac.enabled .Values.anchoreEnterpriseReports.enabled) }} imagePullSecrets: - name: {{ .Values.anchoreEnterpriseGlobal.imagePullSecretName }} diff --git a/stable/anchore-engine/templates/catalog_deployment.yaml b/stable/anchore-engine/templates/catalog_deployment.yaml index a73e0b5edd..ee1b54a5e1 100644 --- a/stable/anchore-engine/templates/catalog_deployment.yaml +++ b/stable/anchore-engine/templates/catalog_deployment.yaml @@ -37,6 +37,9 @@ spec: {{ toYaml . | nindent 8 }} {{- end }} spec: + securityContext: + runAsUser: 1000 + runAsGroup: 1000 containers: {{- if .Values.cloudsql.enabled }} - name: cloudsql-proxy diff --git a/stable/anchore-engine/templates/enterprise_feeds_deployment.yaml b/stable/anchore-engine/templates/enterprise_feeds_deployment.yaml index 8cb87c39bc..9385136595 100644 --- a/stable/anchore-engine/templates/enterprise_feeds_deployment.yaml +++ b/stable/anchore-engine/templates/enterprise_feeds_deployment.yaml @@ -38,6 +38,9 @@ spec: {{ toYaml . | nindent 8 }} {{- end }} spec: + securityContext: + runAsUser: 1000 + runAsGroup: 1000 imagePullSecrets: - name: {{ .Values.anchoreEnterpriseGlobal.imagePullSecretName }} containers: diff --git a/stable/anchore-engine/templates/enterprise_ui_deployment.yaml b/stable/anchore-engine/templates/enterprise_ui_deployment.yaml index eaf1c997de..2fd8f6bda0 100644 --- a/stable/anchore-engine/templates/enterprise_ui_deployment.yaml +++ b/stable/anchore-engine/templates/enterprise_ui_deployment.yaml @@ -42,6 +42,9 @@ spec: {{ toYaml . | nindent 8 }} {{- end }} spec: + securityContext: + runAsUser: 1000 + runAsGroup: 1000 imagePullSecrets: - name: {{ .Values.anchoreEnterpriseGlobal.imagePullSecretName }} containers: diff --git a/stable/anchore-engine/templates/policy_engine_deployment.yaml b/stable/anchore-engine/templates/policy_engine_deployment.yaml index b11f04da06..b43f93a351 100644 --- a/stable/anchore-engine/templates/policy_engine_deployment.yaml +++ b/stable/anchore-engine/templates/policy_engine_deployment.yaml @@ -37,6 +37,9 @@ spec: {{ toYaml . | nindent 8 }} {{- end }} spec: + securityContext: + runAsUser: 1000 + runAsGroup: 1000 containers: {{- if .Values.cloudsql.enabled }} - name: cloudsql-proxy diff --git a/stable/anchore-engine/templates/simplequeue_deployment.yaml b/stable/anchore-engine/templates/simplequeue_deployment.yaml index 6b90fe103d..e9eb5fd8a5 100644 --- a/stable/anchore-engine/templates/simplequeue_deployment.yaml +++ b/stable/anchore-engine/templates/simplequeue_deployment.yaml @@ -37,6 +37,9 @@ spec: {{ toYaml . | nindent 8 }} {{- end }} spec: + securityContext: + runAsUser: 1000 + runAsGroup: 1000 containers: {{- if .Values.cloudsql.enabled }} - name: cloudsql-proxy diff --git a/stable/anchore-engine/values.yaml b/stable/anchore-engine/values.yaml index ecff84c8f9..2231afbaeb 100644 --- a/stable/anchore-engine/values.yaml +++ b/stable/anchore-engine/values.yaml @@ -83,7 +83,7 @@ ingress: # Global configuration shared by all anchore-engine services. anchoreGlobal: # Image used for all anchore engine deployments (excluding enterprise components). - image: docker.io/anchore/anchore-engine:v0.5.0 + image: docker.io/anchore/anchore-engine:v0.5.1 imagePullPolicy: IfNotPresent # Set this value to True to setup the chart for OpenShift deployment compatability.