Member

I extracted this change from #206.

Use the postStart lifecycle event in st2actionrunner and st2client pods to correct file permissions on the stanley ssh private key.
Includes a test to ensure the key permissions are correct.

see:
https://kubernetes.io/docs/tasks/configure-pod-container/attach-handler-lifecycle-event/
https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/

• Fix stanley_rsa file permissions with postStart lifecycle hook script for st2actionrunner and st2client
• bash needs to run the script directly not with -c
• make the ssh key writable so we can change permissions at runtime
• mount ssh-key to separate directory, cp, and fix permissions
• add test for stanley_rsa file ownership
• use st2 as test intermediary
• add changelog entry

Fixes #84

Allow adding postStartScript lifecycle hook to all deployments #206

Add chown command to postStart lifecycle hook for actionrunner and st2client pods

bash needs to run the script directly not with -c

2911e0f

make the ssh key writable so we can change permissions at runtime

6a4a2ff

mount ssh-key to separate directory, cp, and fix permissions

46fd763

add test for stanley_rsa file ownership

4dab18e

use st2 as test intermediary

c92fae7

add changelog entry

a6e4ab1

Make system_user "stanley" configurable #220

Allow replacing stanley with an alternate user #208

arm4b reviewed Jul 10, 2021

View reviewed changes

View reviewed changes

Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.