Блог

Я пытаюсь смонтировать ConfigMap в Nginx, но когда я монтирую ConfigMap, мой модуль не запускается с ошибкой Error: container has runAsNonRoot and image will run as root

Мой Deployment.yaml

 apiVersion: apps/v1 
kind: Deployment 
metadata:   
   name: {{ template "fullname" . }}   
   namespace: {{ .Values.namespace }}   
   labels:
     app: {{ template "fullname" . }}
     chart: "{{ .Chart.Name }}-{{ .Chart.Version }}"
     release: "{{ .Release.Name }}"
     heritage: "{{ .Release.Service }}" 
spec:   
  replicas: {{ .Values.replicas }}   
  selector:
    matchLabels:
      app: {{ template "fullname" . }}
      release: "{{ .Release.Name }}"     # We dont need a large deployment history limit as Helm keeps it's own   # history   revisionHistoryLimit: 2   template:
    metadata:
      namespace: {{ .Values.namespace }}
      labels:
        app: {{ template "fullname" . }}
        release: "{{ .Release.Name }}"
    spec:
      containers:
      - name: container
        image: {{ template "docker-image" . }}
        lifecycle:
          preStop:
            exec:
              command: ["sleep", "15"]
        imagePullPolicy: Always
        ports:
        # The port that our container listens for HTTP requests on. Might also
        # be 3000 or 8000
        - containerPort: 8080
          name: http
        env:
        # You can set environment variables that don't change across environments here
          - name: ACTIVE_ENVIRONMENT
            value: {{ .Values.environment }}
        volumeMounts:
        - name: msal-config-volume
          mountPath: /etc/nginx/html/assets/config.json
          subPath: config.json
          readOnly: true
        resources: {{ toYaml .Values.resources | indent 10 }}
      imagePullSecrets: 
      - name: secret
      volumes:
      - name: msal-config-volume
        configMap:
          name: msal-configmap
 

Мое /etc/nginx/html/assets/ развертывание искусственное, где я пытаюсь заменить config.json файл из ConfigMap. когда я монтирую msal-config-volume модуль, он не запускается.