-
Notifications
You must be signed in to change notification settings - Fork 346
Open
Description
The statefulset mounts the initScripts into the docker-entrypoint-initdb.d/ as being only executable by root. This prevents the script from executing when Influx is being run as a nonRootUser
helm-charts/charts/influxdb2/templates/statefulset.yaml
Lines 38 to 42 in d23ecc4
| {{- if .Values.initScripts.enabled }} | |
| - name: init | |
| configMap: | |
| name: {{ include "influxdb.fullname" . }}-init | |
| defaultMode: 0744 |
influxdb-influxdb2-0:/docker-entrypoint-initdb.d/..data$ ls -l
total 4
-rwxr--r-- 1 root influxdb 141 Jul 22 20:29 init.sh
securityContext:
runAsNonRoot: true
runAsUser: 1000
runAsGroup: 1000Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels