BARTRA, RICK 19169bb458 Run haproxy pod with the nobody user (65534) ... To be able to run with the nobody user, an init container is used in the haproxy-anchor pod to change the ownership and permissions of '/host/etc/promenade/haproxy'. Security conext was included in 'etc/kubernetes/manifests/haproxy.yaml' and 'promenade/schemas/Genesis.yaml' schema was updated to included run_as_user property for haproxy pod. Change-Id: Id248face0be43c417284ceb781997634a9c4dd5e		2019-09-11 16:18:30 -05:00
..
Docker.yaml	Migrate to DH-managed config files	2018-01-26 13:43:18 -05:00
EncryptionPolicy.yaml	apiserver support for etcd encryption	2019-04-24 13:26:59 +00:00
Genesis.yaml	Run haproxy pod with the nobody user (65534)	2019-09-11 16:18:30 -05:00
HostSystem.yaml	Update configuration to new schema	2019-06-07 16:04:05 -05:00
Kubelet.yaml	Support systemd unit management during node join	2018-12-14 15:06:38 -06:00
KubernetesNetwork.yaml	Use HAProxy for apiserver discovery	2018-02-08 14:30:35 -06:00
LayeringPolicy.yaml	Add deckhand design_ref support	2018-01-22 08:28:19 -06:00
PKICatalog-addition.yaml	Add missing storagePolicy entries	2018-07-23 11:17:41 -05:00
PKICatalog.yaml	Share process namespaces with exec probes	2018-11-02 14:53:48 -05:00
armada-resources.yaml	Fix outdated external references	2019-09-06 13:11:17 -05:00