[charts/bigdata-operator] use non-root fluent-bit container image

spotinst · May 29, 2024 · 95c319a · 95c319a
1 parent 3333600
commit 95c319a
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 9 deletions.
diff --git a/charts/bigdata-operator/Chart.yaml b/charts/bigdata-operator/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: bigdata-operator
 description: Spot Ocean BigData Operator
 type: application
-version: 0.4.17
+version: 0.4.18
 appVersion: 0.4.15
 home: https://github.com/spotinst/charts
 icon: https://docs.spot.io/_media/images/spot_mark.png

diff --git a/charts/bigdata-operator/templates/deployment.yaml b/charts/bigdata-operator/templates/deployment.yaml
@@ -82,6 +82,8 @@ spec:
             failureThreshold: 3
         - name: fluentbit
           image: "{{ .Values.telemetry.fluentbit.image.repository }}:{{ .Values.telemetry.fluentbit.image.tag }}"
+          securityContext:
+            {{- toYaml .Values.securityContext | nindent 12 }}
           ports:
             - name: http
               containerPort: 2020
@@ -122,16 +124,16 @@ spec:
           resources: {}
           volumeMounts:
             - name: telementry-global-config
-              mountPath: /fluent-bit/etc/fluent-bit.conf
+              mountPath: /opt/bitnami/fluent-bit/conf/fluent-bit.conf
               subPath: fluent-bit.conf
-            - name: telementry-global-config
-              mountPath: /fluent-bit/etc/parsers.conf
-              subPath: parsers.conf
             - name: telementry-custom-config
-              mountPath: /fluent-bit/etc/custom-filters.conf
+              mountPath: /opt/bitnami/fluent-bit/conf/custom-filters.conf
               subPath: custom-filters.conf
+            - name: telementry-global-config
+              mountPath: /opt/bitnami/fluent-bit/conf/parsers.conf
+              subPath: parsers.conf
             - name: telementry-custom-config
-              mountPath: /fluent-bit/etc/metrics-collection.conf
+              mountPath: /opt/bitnami/fluent-bit/conf/metrics-collection.conf
               subPath: metrics-collection.conf
             - name: varlog
               readOnly: true
@@ -140,7 +142,7 @@ spec:
               readOnly: true
               mountPath: /var/lib/docker/containers
             - name: telemetry-aws-credentials
-              mountPath: /root/.aws
+              mountPath: /.aws
       volumes:
         - name: telementry-global-config
           configMap:

diff --git a/charts/bigdata-operator/values.yaml b/charts/bigdata-operator/values.yaml
@@ -49,7 +49,7 @@ telemetry:
   fluentbit:
     image:
       repository: public.ecr.aws/ocean-spark/fluent-bit
-      tag: 2.0.10
+      tag: 3.0.5
 
 resources:
   limits: