Run mesh-init as a non root user - Githubissues

hashicorp / terraform-aws-consul-ecs

Consul Service Mesh on AWS ECS (Elastic Container Service)

https://www.consul.io/docs/ecs

Mozilla Public License 2.0

52 stars 30 forks source link

Run mesh-init as a non root user #52

Closed erichaberkorn closed 3 years ago

erichaberkorn commented 3 years ago

Changes proposed in this PR:

Run mesh-init container with the consul-ecs user. This currently is just being used to bring in the changes from https://github.com/hashicorp/consul-ecs/pull/37
switches all of the non-root sidecar containers to have read only access to /consul

How I've tested this PR:

Tests
The examples after updating the consul ecs image to the latest one

How I expect reviewers to test this PR:

Verify the tests.

Checklist:

[ ] Tests added (The existing tests should verify this)
[X] CHANGELOG entry added

pglass commented 3 years ago

This currently is just being used to test out the changes in Make NAME the /consul volume owner consul-ecs#37

(from PR description) Is this something you want to merge now?

erichaberkorn commented 3 years ago

This currently is just being used to test out the changes in Make NAME the /consul volume owner consul-ecs#37

(from PR description) Is this something you want to merge now?

@pglass Yeah, it's ready. I just updated the description. Sorry about that.