Add security context to quarkus pod

This is to fix the file permission of the access token file, see kubernetes-sigs/external-dns#1185
moralesl · Sep 28, 2020 · 67f7a38 · 67f7a38
1 parent a84cb99
commit 67f7a38
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/fargate/eks_cdk/lib/eks_cdk-stack.ts b/fargate/eks_cdk/lib/eks_cdk-stack.ts
@@ -41,6 +41,9 @@ class EksCdkStack extends cdk.Stack {
           metadata: { labels: appLabel },
           spec: {
             serviceAccountName: sa.serviceAccountName,
+            securityContext: {    // To fix the file permission of the access token file, see https://github.com/kubernetes-sigs/external-dns/pull/1185
+              fsGroup: 65534
+            },
             containers: [
               {
                 name: "quarkus-demo-web",