From 2dab89a737c65a6d2e6e1ca0bf8878732e5adce9 Mon Sep 17 00:00:00 2001 From: Jordan Oroshiba Date: Mon, 22 Jan 2024 14:36:23 -0600 Subject: [PATCH] fix(celestia-node): pvc security contexts (#167) This has already been deployed and is working in dusk-3 network. --- charts/celestia-node/Chart.yaml | 2 +- charts/celestia-node/templates/statefulset.yaml | 4 ++++ charts/rollup/Chart.lock | 6 +++--- charts/rollup/Chart.yaml | 4 ++-- charts/rollup/charts/celestia-node-0.1.10.tgz | Bin 0 -> 4888 bytes charts/rollup/charts/celestia-node-0.1.9.tgz | Bin 4850 -> 0 bytes 6 files changed, 10 insertions(+), 6 deletions(-) create mode 100644 charts/rollup/charts/celestia-node-0.1.10.tgz delete mode 100644 charts/rollup/charts/celestia-node-0.1.9.tgz diff --git a/charts/celestia-node/Chart.yaml b/charts/celestia-node/Chart.yaml index c63843a..a1db722 100644 --- a/charts/celestia-node/Chart.yaml +++ b/charts/celestia-node/Chart.yaml @@ -15,7 +15,7 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 0.1.9 +version: 0.1.10 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to diff --git a/charts/celestia-node/templates/statefulset.yaml b/charts/celestia-node/templates/statefulset.yaml index b556e0f..297c1d8 100644 --- a/charts/celestia-node/templates/statefulset.yaml +++ b/charts/celestia-node/templates/statefulset.yaml @@ -18,6 +18,10 @@ spec: labels: app: {{ $label }} spec: + securityContext: + runAsUser: 10001 + fsGroup: 10001 + fsGroupChangePolicy: "OnRootMismatch" initContainers: - name: init-{{ $label }} image: {{ .Values.images.node }} diff --git a/charts/rollup/Chart.lock b/charts/rollup/Chart.lock index 8166088..7752662 100644 --- a/charts/rollup/Chart.lock +++ b/charts/rollup/Chart.lock @@ -1,6 +1,6 @@ dependencies: - name: celestia-node repository: file://../celestia-node - version: 0.1.9 -digest: sha256:856642db770b3a297f86abcf5973ee3308dfbd9dced29b4067ad138683d883b1 -generated: "2024-01-16T14:40:15.623528-08:00" + version: 0.1.10 +digest: sha256:947d7d4e8c4e6ecc96ab098cbdcf8457c521b19aa37b937df49641e47f27d938 +generated: "2024-01-16T15:41:52.300808-08:00" diff --git a/charts/rollup/Chart.yaml b/charts/rollup/Chart.yaml index c6b0fe7..be0e5f3 100644 --- a/charts/rollup/Chart.yaml +++ b/charts/rollup/Chart.yaml @@ -15,7 +15,7 @@ type: application # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 0.8.5 +version: 0.8.6 # This is the version number of the application being deployed. This version number should be # incremented each time you make changes to the application. Versions are not expected to @@ -25,7 +25,7 @@ appVersion: "0.5.2" dependencies: - name: celestia-node - version: "0.1.9" + version: "0.1.10" repository: "file://../celestia-node" condition: celestia-node.enabled diff --git a/charts/rollup/charts/celestia-node-0.1.10.tgz b/charts/rollup/charts/celestia-node-0.1.10.tgz new file mode 100644 index 0000000000000000000000000000000000000000..41b67b85e7fe34bbe978e3987f59f9ef9ee696d7 GIT binary patch literal 4888 zcmV+z6X)z7iwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PH;dQyaOG`}6!2{R~yv&EfF}#t>iSu81Kl_mbcOHhZtKsXTe6 z?a?wL%}N@Bm*xKUD@il<%y|3(;jx!JM3u4i(P~NkrB+KGhA0&!b;f;c^aCQ4J0(&0 z-6N)Ev)Sx+I_7_~*)0EWc6M9ewK{uyyL+8ZcYp7@W@~r9z4sk79}|gXDUphZ@0wrT zS9x&XNFp))h(c1%dN64_B#vi4n{KP^?m9k7PtaJIyhHdA!w5W0Cotjye2harrEClY z`YA0zNXLN!O;N5B5y}*y42A4DbzmgI9$b^rC`38oEFy7;4nQKp9uTPnB`z1^Sxu=B zf5%}W#wb=)`;`kW13DxXb!?3Sp*w0CV-H9ihtwl_XwD=zY`4{P{_KT$qEzJn2?-OF zk1YV!@c(YJ(=73Sr`2sg^Z!$%EjYpvNkRp7?F~~){4GJ|p>UloxD2QSDuKX14&T44 zkGP14Qs~2ohNvqXp%)T?Fd>4HVTckGhao~tq(mPmQyiu|5uh-NL!wZ+&N$>l680Q0 z{3~PPVGnASY3n{t>Ry;gg`(yF2sB*U=Lu6iXgQ9@*@%v_#%0z9V5qLSxavW~y@1p^ z4rqZz*{NU1;sQ_O9@Iuj7`h&35}8b-o7Qk=P)&yG@u+56>Ap|di1%PbLaF<+!o&!@ z6z++Ly#W`h2d|p1nz{Rx<&6w4F2;?*$a|AiVyE3*pqQZOL2a1G>5$*_TJG+i+pI^43~P?# z#9S!Tbp}O$2N1E>gLb#OcTfhjx4XCNI07Y4glDl9no^_%1K`DpULgH7!ibA$4>~8* z0SIYC3zgc1N(U#@akk*+09j6tP_% zl4lf3+#N#{O&X?(UWBzwYky{_knh?QP?wbA%(xtUMkPi4c+@hR(~z-JNrLTL<43 z*D_l9pf`59;yYch2KBTa9hF6i0W=UeqBn4NwqGnY>yoNv%Fe z@w1>Er#xnfVnS2Bzh=~FRfA17aG=Z!6Mw}7xf;E+=}Jtl4y2LNMoY$ChS`Ql5u=V# zx+3;0a)DBDuhCeFV{tedO*c1-)<}0}7P>B$6VFX;bJyytTmxfK&J1Ub#=5CDTJa$Z zU>ZJT8BD{f#aOi#1vKxw8m966)+0ZctDlq#zFOiBz**5Aw*NoTJ z{$MN576X4HV80#qm6${GLk_jty?iOMG*~0Z3NXzuUU9^bAkKhbi zqyJl-?rvHCcXxN6_5V{O%`MwT4MXqsW+K!n_>5c56=i-8`i5ZMlh}z+5xvKlJ7{ii zvp(+b>U#er>&PZW=g(>h=VSmgozJ7N2Y)yKdH^a8;d}S32JD`of|}{0k*iz#0k+`} zV3hgD6m&GmdcFRYL$QwWhYv=Ro-&;0%3$qq(%u?{R?7yK+GCrG;cff-l#RHigt8?y zFZ{zeeW*Y`gJH6%oac|YC@GQJ*VD~IC%J$8?)c*J^zcjnr;E$8_g^m0zPvduv|g|l zwf4-<$6r{hER+A%zma*hypYI;9}BFL|IJpnDF55d{k`V1{C|p6+P4)woo?!)(o}Cn zlOSx2u&t%d%?@mvGlRUiD78<$WL45OEix`DbUjJkoBGv(bSZDlWWz-PT3-|45-DL2 z$@YkjjM3{Yb;_O%jXO_QsHa&UmH-0Cy!&S{`7N=Iw5)gCoEuo>=9!Bz1ChD_=M}DS zYRh6GNQBB9jv7B+>NYmIz;;pcM$Uoc3*hc9^ET!^oV7}vYUyImHa>q%(e|7+NXzBF z-HATNQSdtX-|m#-Kf1f^=kwnuNe{9AGvRE#AtkG>Qa*3$eY%%{mq~evA$p1nD?v#d z7Y#=(WwVpcoC?#Rc3@i<E()r}1p0$Zro|=`8sKx1;!_o8eXEVrOJS~;~iYOcUUlouoDF#qN8(uK%>9(+E>Nv;1~_2PsN`}1b$_9k z#u>?~2Kg8y3%@8LBciE%;nNZBlsVaM!ts?P>%JErr`IVePob0}Ig z>#0{wZ%Iov z=FWOv;+xFR_fm?4Ra7}EtRzlrOwrMzG%BEsZ1Ps{s65YJ=6O8FQLi+;D?E_-u2Va1 z0iV^@q)j;sYTouC#%WgS zEW%U#A0!GZ0Q><;&?x8eZneuDTU_Sw9?o`|e}6Of%b4Ji*?9#Vdz4}awF!c`1Cdg7 znG9{^WmWFsCoDE9c?{E7&5c}!%f@f3xYeXvIq+PoSvlO@ou-r?b$_8Rckgn8X9Yhgj@f&-Dqa zvf4=_G|RcAZE?PAL}-`@ybJ`&fQNn$cAJF?F$&843-mbiWe@f$M5U9Ts@yDXK|PnW zd9FtTshBGi)>m2@O9bgm0T-viw-*xLo2d8Zey8KCS&`x~Y$fjYl+k#`?}PUe0lNh8 zHHY0xM%ZaLmtj2+G$LY}MfctZ^WsdGrMHDwEw*F5Ig<*R`e?@84+$;VPM*&CP_Yme zZapp#sUfsbmSiPHv6>!H(SzGH#zc83GxO&Pr*cORD?R4%m(0(-Ro5e_t&LQcCuxcL z1vQr~7SG4*=~&S;UM6`mZa!2>&|#v=Hdc1hR5)8(iRuy+_Iz;kZKvh_Kf}uA;QwoH z1g<^*ZgP&c?aMwMy!S_NDsLlg`ZnhqGR=Sm$b-``N? zQ#Q7i#LtAPw_LoXLaIJzGKo+)0*$uLTvX?%t!&5Y$LAn`|MzK`{7*LnPjUXg+v+af z|LH!*|2|2|1i8 z+T)R!cvMY`*FY-S;+D12#x!Ak)F(5 zqKFDdAm*^@_$C%8%{AS!Kga~>6_swlr82jYikl}Mqaccl9-OjLk$pyC@jRgpi?18h zJOD4cAAo73AHQJLAz-;>nJhpF4EPE(7gl{FH_Zpn@z5!TYs z#6pj*eSN49&REetB8-gDuMelS6q|Dlkw|pYAR71seoMHT?OtmEhLJ0ShIzFnYgFhg z-+wxXCeGd7Q?LD74QgL%`Lp7+EdLNrC~UE_9#SSQ0bA9@suqPVHembG5l!*Ahn3>y z*~0uLQqlf%HLK7u;{qSCk2UsRb8q4Pcc-S4nKn2Bh=SmDjQJ(jAg3=cTJ6{hbRsc3%FEvjrcC zpgfUqdUPxuH+>kyajB1_VXF)NtK&|jr@84{kaI=;U${5-D1EHq|IYqi+5flK-h1Z% zCrO|5e(Ce_>w+eLs%GA{s#&WcJqEm_5%NUAYpAuGQd?^mL85$q&B`Uk^Ph_5(en1u z3_yBI{8OI`{Okan4s-?G?tIW6aAE6ryLU#(2U!EFho@KJdz-jd1HUTJ3#PrS+)j=i#m$ z+51E#Bpe`$*_h6Gq9_|*>izjSjs(hJU=FhNy0m6gu_4K7(8o8PiD87-v-g(t!n%FV z*n6|35H?2P9lwUxuxAftf2898UPG&Cf1U{9VHF~C`rZKZ)jc0H%U!SQJ7bOWLEjLH zr2<_kT^-$Jo<$BcRi6-r*JQd`i&r}1ICYm~Gw6J}2#DpzpCp>^xmiw6ByAn{A`r(n z$43_fB1k0dcx^O?-g4wveoxkNg=R03E6pYl;77uIJ;P>0Qdy(VnU@HG%$vTW5mja~ zP05>NG(vHqcPg)8x4qvzC?Wdc=>GtoDMFffQ!>dTHQ+q_Xx~hud{JhaDu|-bd8mb| zF4;}G27Qw2_ev+0@tomP3DnLQ#qNk+j=E(+uAE^dl1Avel(Xq(c8k zB7;oQr&$GoleTb;k(uJEzxIh2U`i>S=ButLIb}ZHGqImTA_K>fsG!aPg}@tXzG}NN&5db{ zBSOQky#BM~rMShw*HOakyRQ<}7gPNG4{+-MY{7@K%VVh9=c>$$RRQs?KyetO$~`Nl z`20s2i3&ay=5S!@YDIAN_u~(*x4$pkBdK^9B)vrfBvC<~7G6_DuM6)zzr{JJoP^S4$hl?Rdtw6|XSn@p<;>Kd0yPoSxISoBlTd0RR7i KYpZksXaE4$^^ckW literal 0 HcmV?d00001 diff --git a/charts/rollup/charts/celestia-node-0.1.9.tgz b/charts/rollup/charts/celestia-node-0.1.9.tgz deleted file mode 100644 index edf05aecc5f514118e5e3d390971ff5252257503..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 4850 zcmVDc zVQyr3R8em|NM&qo0PH;bQzJK%`FZ||j-hIkJv@G39_uUaiZv|ZvJV%K&3(1m+E1Qo z+X^$%MA8@>!u{=6dW=0Y9%IAukxLG36$^T_T2jB%-I@R+l!}r%;~_SBVT`1v;2Rvv)%lr)!Er;?KZdD+k4+MTibiB<~PuMOeB_-R4O9AX@2!w z<;DF)3Q6ck6q0h*g-P2ZNizGh>9^Ycwilud1WlBwJA@xFiXqT+0z)n!#3bTV%0@t- z=V%EcIvOj`6ySKMXZM-^pQ3EQ5e`WjDX?d6m|Eg*DY5{C?`^=vm`b1$2>j#l-P`(* ziWYiYF2p<-lX}Mk zEwCs%4GUFV;Azr@+AxhGKj2Ivld1Gw4}S*LRQLgpYi5+5`;-lN7ltH~dOj;mjL>s% zPec;*xlmnr)qK^|UHB!k!&Hsm;sm2Eybwsj7oJCBGD4}BlB7}8=MfF2T{s=S=c+GI zBGVA{vbr!D2g0Ykk>SO~s8LvXcj6?ro9-ON1VtBWgH%oj{JPunw|D$zJx*m*^E@x% zLYb*EDEfB*kpx|6@9ysGmjUf;?`(UXK*>`PSgeJn6luW#1WBq7NdFpR%*C_|ofGN- zL^P&_PVGXc{S)eW8}RcOSx%u)1_Tnp!!*zm8jww>;4DU_K#qADg^)@F0ulp(N_U;m z5Jiq=?P;Y#Q!5vy`xRAVIO+AbfFXvOR3$3lR}8X+S(5ZNfUpoQaVkAKLEpjG%Rr_n zJ)F}(HhC9DLE?eK$t`&Uev)=BP0J)eP-C2JJCHCGDCHJ#HAZno^`cV6N61hRg`t5_ zpA&oi5~p=H$g}~(nmPJJjk^Zp#wAV#Wuv-6sazM$t`@|9>*5yyWQ%`qdejoZf5kw_ z#%BNQ!+#z3F20-|HQbsSB@`M?b;^ceZdG$2FLBzn1hmd3Oh`mSqPWoG?za_`4f#X% zA)bCQ(|@_dsh_P;Q+0lm3of*fGqN zZ!XHhx~q1b60j95*-Mf3#}fa*MCU8Qk7lY5HgDr|0soEk*lprlA{O#uz0i zq_2{%HU(GMf9>tvKH zxt7t&dwsFf9pCDHHK@CObXXQ822fw%kY2;>?V_kDw%0WfWMO4jEwXK&W%6pV#aVse z@Ux&jue@f7VnUtXU$JV})nJn?94HH-G`wSje2tzPdM75A`_f2hqa~9d!)#5Yh*8HV zeUStfxv^47x6xRNV{theO+UAb)=2kf7P@YhlfZYjxo`DVZh)~UXNI#zW7XCht@w}w zFasZQ3}#@}Vcc~V1vKw_8fNhQ&Lh9NM>>_9C0{-iyYy2DYHaR#K`IrGvuo6Uu2`?_ z{oZz-9R~ikz`(W#)a-!TB5BMgFxFEBDiM^aB^y?n+%LlXvxVzlpe)n>_RwOIJc2W5 zh5m1KcDKv=f48;wtpA^)Xl~gwY8bi)>xodW;4^M{mz0HF=ox}}M-neaMf4qG?x4B3 z$>zAdt?T=jtRtHgoj-R=I4=X3>3kkXUHHQT&EEc=zSv!S@UXxt`QL2q7Uh4txwqYUmj6#tO82&+r_*;XDoyoP zGzr2+2%B2kTyMdqi5cX@MQObAl2u7t*JNB&=m(Pe*Y(SN=~LdA$%gX+w4NryB~rp5 zlHCzKnPAXe>XiL3Fz!6vq3){QF98IQdG|jgVE}#&2^dRU?)0mm8E@qb`-})Fmnat_BT|twR^esOs@~;$=26lhwMt zUNMsy8=Fjm+$Pv8C0~n(V%LDjG0{i&sWG5zmQ=81E*{lky4seR{BsTp5u+T67R|bI zaOvA&scAM%8Rvd3g=!J|d4g4O4HF)vF}~9$yMRT78*0L%LZ?E`Ng1`^jw5)?-LLtx znU}Z;^ZP9^NCj0>O(1x!ii;L0JCr|3eQ9oK<9xC4MDR3OY;~T51;J228QJ8G;Bk4M zgUktdhQn@Yd+%@t=BIWh)dD_u8+NwjjG6h^huDdQ71@*TFEJ1o7gsbaXSfNjc)+7B zT=e?uthrQK+J;&7UU6U{sjmo6@qdswssQi@C_&?#^SRY7Pi%3S!+SW}Wv=%1*e_#( zM`q_c;Mk~!UDP@V=3*12?lK+N&da*o!(~?-RC3Nos|D11m9?wP%KHnwzs%6(2H@K`+-vwa>$FF3%N-eO+yaGx1fko3< z7Uhg`v^GqWzTg8aPOkU*1XWq>xMaz4ZRv)ZZyORCr2;R;0_B)TVHdWWg$@Y{%ENOE zI16PLb}B@rm*1+~E^R9X{;@T$djqVGvk zAyXgCx_c3!CEF>`Rqrbf!osa51tK+s7Ri#V#5hsYBPzOZv%;7tA7y6#T;f!2>1DZy zOSoiz?yb5WNo}pAvI0p<)Gw%c_plhMvVp3iX}nDGWZZnHl%RuDm2Ipn=u-%D-HGZF z751PQ&T{{cp&t|Y{n{5{E91ZIa{kZW?(Vby|4GWtP2(l}jKEnmg)71oC=P)@qRh)0 zC+!RwXwJPtAOh`61s_~uVB;mc;Uf1`XA7o0oxQJ_K|8n541oh@aPs5v493H}P;_V> z=`0hb<$8nmLNMFBH>n6^&w$x?7-ip8*1iz5&aHA)PK*A-#)9hxH_ymV4PVQh%XEN( zp+YkOQ=uwx|J4nNa{+dc;S# zqEQ3`bWlPVOifOGUN*jfoH&D2QZ|Bc%1BIud5f+bB2lS8AHG^w+-Y<_Oe5s1+Rdfv zrZVxdys!7r722rJy!`=5NI=!J_)IXDYb5FK&U(x);96Ih?9!=J7<&LD2vADhFbnCP zAqjsLRN)5}nD?zEY|kpy$_xQ>!WGw&1%;QrdNk7}nQuoWQHH*Gf{_KXd5DL@A!W1m zW+|t$5DE|R+(l+CP{akly9v@9Unc^kd8S!*LYO42qS766sm!aCqQ%Y=6hv{+g;Q2) zvd`!jo!E6)eBE9TI8%a0^&}#!JjaqDS6p18@UmM~PH(S8W#$TbPf{xf(>CvlrWK=A zHIgKL$&Mj0)?8{@VMgD6eWsAkRxv&%jEpd>52iJT%^5~WB>FCi0{(#CQm$rKrrH>z z*q7sm`D#fvs4!W6ez%7v&)L3HuKimLYF}#kSm8>Re+VZO?seG=j)_aa?waDR5rrw% zVEa;Bp!nSXPI2>WVg4mb(f;!_tI!eS0v~aX74~0qXW{*Cr}dow@ib)v`a~%d%zU-Q z9=)~j1}Tm7-4YTKT$=br_F)Z~CMFO7a*R;~S_@d+O4(=&1V%*B3EIb#^LoNUZvz;P z%=ebyyTm;E#n66{);1rk0^1=!XjZ4EKV*!jEWiQ+y5T*qY+4JqPNUV{ zGhJGbihdsM%9XuKRZ5~hqL{7ejHimS(S^RBpW#rT9QRH1RG&+0Mipz4tOk929gNNG z{$TdK9euEVk2ChpTq%SNjKAeqZ~!|t68Hlhjo|=VP5bAGAOTh(GNy3D&D~_GJB-=sn)A^WKZv082`8~JG zE(~V-_~&DBe0_X$-Y0^@(yrI05a=sMj^%e`E!Sx7BDvOV0|9;@EYv$}E+mybdYlER z5Xge*TN+bkHq*4cPKQGj=lZ5{0Nd@o-Te}x?~ncu;OP+3#Ouf;k5r%Y=%f8+7UhdF z({w=;JFB`I&J!8Cw&iIb6CICRfiKoBQl^7 zRa3W>Bu*kcH0d6Cox5J)M(PG1Q5ojNI>R)>#7^9<~f&Du{&9Uamrj_luCC)d3$9mMPB8PUTDDdyVc$h{}W-zUb z=;PtJt$P9#zw%OP|5e%ll^MieVPmea|J$wRUOE2X+IzPDpQLPjYZ49zM2T5;t;m70m2b&*1;sevtKrG|7h{gd8P%p)$t`q#^==SAr_zIguQwdLe;v1(Ir3x1TLF z3nI*XD${+9S3|$xGeCp^Wg}zTi8OL989s!6HvYK|v+~C(j<(=xOoOq* z(M%^{FwIit^kng6NCngrs7^NZ05BMHsBM~^uEBpS>DZXh>fL%C9l|I07V5**-Qn}U zYy3^z8@Ykw^lQvs?8ZC;y#dxV^2pfk``=@omLd`11HXd-R{n Yb9pY$<*!@*Hvj