feat: use base image for initContainers to enable non-root use

InseeFrLab · Oct 20, 2023 · 1bbdfb1 · 1bbdfb1
1 parent df9e582
commit 1bbdfb1
Show file tree

Hide file tree

Showing 9 changed files with 14 additions and 24 deletions.
diff --git a/charts/jupyter-pyspark/Chart.yaml b/charts/jupyter-pyspark/Chart.yaml
@@ -24,7 +24,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.32.18
+version: 1.32.19
 
 dependencies:
   - name: library-chart

diff --git a/charts/jupyter-pyspark/templates/statefulset.yaml b/charts/jupyter-pyspark/templates/statefulset.yaml
@@ -99,13 +99,11 @@ spec:
       hostname: jupyter
       initContainers:
         - name: make-configmaps-writable
-          image: alpine
+          image: inseefrlab/onyxia-base:latest
           command: 
             - sh
             - -c 
-            - |
-              cp -R /src/* /dest ;
-              chmod -R 664 /dest/;
+            - cp -R /src/* /dest
           volumeMounts:
             {{- if .Values.s3.enabled }}
             - name: secret-coresite

diff --git a/charts/jupyter-python/Chart.yaml b/charts/jupyter-python/Chart.yaml
@@ -23,7 +23,7 @@ type: application
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
 
-version: 1.13.12
+version: 1.13.13
 
 dependencies:
   - name: library-chart

diff --git a/charts/jupyter-python/templates/statefulset.yaml b/charts/jupyter-python/templates/statefulset.yaml
@@ -74,13 +74,11 @@ spec:
       hostname: jupyter
       initContainers:
         - name: make-secrets-writable
-          image: alpine
+          image: inseefrlab/onyxia-base:latest
           command: 
             - sh
             - -c 
-            - |
-              cp -R /src/* /dest ;
-              chmod -R 664 /dest/;
+            - cp -R /src/* /dest
           volumeMounts:
             - name: config-files
               mountPath: /dest

diff --git a/charts/rstudio-sparkr/Chart.yaml b/charts/rstudio-sparkr/Chart.yaml
@@ -23,7 +23,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.16.10
+version: 1.16.11
 
 dependencies:
   - name: library-chart

diff --git a/charts/rstudio-sparkr/templates/statefulset.yaml b/charts/rstudio-sparkr/templates/statefulset.yaml
@@ -84,13 +84,11 @@ spec:
       hostname: rstudio
       initContainers:
         - name: make-secrets-writable
-          image: alpine
+          image: inseefrlab/onyxia-base:latest
           command: 
             - sh
             - -c 
-            - |
-              cp -R /src/* /dest ;
-              chmod -R 664 /dest/;
+            - cp -R /src/* /dest
           volumeMounts:
             {{- if .Values.s3.enabled }}
             - name: secret-coresite

diff --git a/charts/vscode-pyspark/templates/statefulset.yaml b/charts/vscode-pyspark/templates/statefulset.yaml
@@ -96,13 +96,11 @@ spec:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
       initContainers:
         - name: make-secrets-writable
-          image: alpine
+          image: inseefrlab/onyxia-base:latest
           command: 
             - sh
             - -c 
-            - |
-              cp -R /src/* /dest ;
-              chmod -R 664 /dest/;          
+            - cp -R /src/* /dest
           volumeMounts:
             - name: config-files
               mountPath: /dest

diff --git a/charts/vscode-python/Chart.yaml b/charts/vscode-python/Chart.yaml
@@ -23,7 +23,7 @@ type: application
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
 
-version: 1.11.10
+version: 1.11.11
 
 dependencies:
   - name: library-chart

diff --git a/charts/vscode-python/templates/statefulset.yaml b/charts/vscode-python/templates/statefulset.yaml
@@ -76,13 +76,11 @@ spec:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
       initContainers: 
         - name: make-secrets-writable
-          image: alpine
+          image: inseefrlab/onyxia-base:latest
           command: 
             - sh
             - -c 
-            - |
-              cp -R /src/* /dest ;
-              chmod -R 664 /dest/;
+            - cp -R /src/* /dest
           volumeMounts:
             - name: config-files
               mountPath: /dest