[charts/bigdata-notebook-storage-server] use non-root fluent-bit cont…

…ainer image
spotinst · May 29, 2024 · 3333600 · 3333600
1 parent 434c1d6
commit 3333600
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 7 deletions.
diff --git a/charts/bigdata-notebook-service-storage-server/Chart.yaml b/charts/bigdata-notebook-service-storage-server/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: bigdata-notebook-service-storage-server
 description: A Helm chart for the Spot Big Data Notebook Service Storage Server
 type: application
-version: 0.1.13
+version: 0.1.14
 appVersion: "1.2.0-ofas"
 home: https://github.com/spotinst/charts
 icon: https://docs.spot.io/_media/images/spot_mark.png

diff --git a/...igdata-notebook-service-storage-server/templates/notebook-service-storage-deployment.yaml b/...igdata-notebook-service-storage-server/templates/notebook-service-storage-deployment.yaml
@@ -41,6 +41,8 @@ spec:
     {{- if .Values.telemetry.enabled }}
       - name: fluentbit
         image: "{{ .Values.telemetry.fluentbit.image.repository }}:{{ .Values.telemetry.fluentbit.image.tag }}"
+        securityContext:
+          {{- toYaml .Values.securityContext | nindent 10 }}
         ports:
           - name: http
             containerPort: 2020
@@ -69,16 +71,16 @@ spec:
         resources: {}
         volumeMounts:
           - name: telementry-global-config
-            mountPath: /fluent-bit/etc/fluent-bit.conf
+            mountPath: /opt/bitnami/fluent-bit/conf/fluent-bit.conf
             subPath: fluent-bit.conf
           - name: telementry-custom-config
-            mountPath: /fluent-bit/etc/custom-filters.conf
+            mountPath: /opt/bitnami/fluent-bit/conf/custom-filters.conf
             subPath: custom-filters.conf
           - name: telementry-global-config
-            mountPath: /fluent-bit/etc/parsers.conf
+            mountPath: /opt/bitnami/fluent-bit/conf/parsers.conf
             subPath: parsers.conf
           - name: telementry-custom-config
-            mountPath: /fluent-bit/etc/metrics-collection.conf
+            mountPath: /opt/bitnami/fluent-bit/conf/metrics-collection.conf
             subPath: metrics-collection.conf
           - name: varlog
             readOnly: true
@@ -87,7 +89,7 @@ spec:
             readOnly: true
             mountPath: /var/lib/docker/containers
           - name: telemetry-aws-credentials
-            mountPath: /root/.aws
+            mountPath: /.aws
       volumes:
         - name: telementry-global-config
           configMap:

diff --git a/charts/bigdata-notebook-service-storage-server/values.yaml b/charts/bigdata-notebook-service-storage-server/values.yaml
@@ -41,7 +41,7 @@ telemetry:
   fluentbit:
     image:
       repository: public.ecr.aws/ocean-spark/fluent-bit
-      tag: 2.0.10
+      tag: 3.0.5
 
 nodeSelector: {}