Fix bug 1703 - Adding non-root user to run NBI

[osm/devops.git] / installers / docker / osm_pods / nbi.yaml

diff --git a/installers/docker/osm_pods/nbi.yaml b/installers/docker/osm_pods/nbi.yaml
index f842dd0..bbdf645 100644 (file)
--- a/installers/docker/osm_pods/nbi.yaml
+++ b/installers/docker/osm_pods/nbi.yaml
@@ -44,28 +44,33 @@ spec:
       labels:
         app: nbi
     spec:
+      securityContext:
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
       initContainers:
       - name: kafka-mongo-test
         image: alpine:latest
-        command: ["sh", "-c", "until (nc -zvw1 kafka 9092 && nc -zvw1 mongo 27017); do sleep 3; done; exit 0"]
+        command: ["sh", "-c", "until (nc -zvw1 kafka 9092 && nc -zvw1 mongodb-k8s 27017); do sleep 3; done; exit 0"]
       containers:
       - name: nbi
-        image: opensourcemano/nbi:latest
+        image: opensourcemano/nbi:11
         ports:
         - containerPort: 9999
           protocol: TCP
         env:
-         - name: OSMNBI_DATABASE_HOST
-           value: mongo
+         - name: OSMNBI_DATABASE_URI
+           value: mongodb://mongodb-k8s:27017/?replicaSet=rs0
          - name:  OSMNBI_MESSAGE_HOST
            value: kafka
+         - name: OSMNBI_STORAGE_DRIVER
+           value: mongo
+         - name: OSMNBI_STORAGE_PATH
+           value: /app/storage
+         - name: OSMNBI_STORAGE_COLLECTION
+           value: files
+         - name: OSMNBI_STORAGE_URI
+           value: mongodb://mongodb-k8s:27017/?replicaSet=rs0
         envFrom:
         - secretRef:
            name: nbi-secret
-        volumeMounts:
-         - name: osm-packages
-           mountPath: /app/storage
-      volumes:
-       - name: osm-packages
-         hostPath:
-          path: /var/lib/osm/osm_osm_packages/_data