Add security context to quarkus pod

This is to fix the file permission of the access token file, see kubernetes-sigs/external-dns#1185
moralesl · Sep 28, 2020 · 2385436 · 2385436
1 parent e720938
commit 2385436
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/fargate/eks_cdk/lib/eks_cdk-stack.ts b/fargate/eks_cdk/lib/eks_cdk-stack.ts
@@ -41,6 +41,9 @@ class EksCdkStack extends cdk.Stack {
           metadata: { labels: appLabel },
           spec: {
             serviceAccountName: sa.serviceAccountName,
+            securityContext: {    // To fix the file permission of the access token file, see https://github.com/kubernetes-sigs/external-dns/pull/1185
+              fsGroup: 65534
+            },
             containers: [
               {
                 name: "quarkus-demo-web",