Merge pull request #308 from Yolean/nonroot-kustomization

Kustomization at /nonroot to run Kafka and Zookeeper as 65532:65534

Author: solsson

nonroot/fsgroup-65534.yaml

@@ -0,0 +1,4 @@
+- op: add
+  path: /spec/template/spec/securityContext
+  value:
+    fsGroup: 65534

nonroot/kustomization.yaml

@@ -0,0 +1,27 @@
+bases:
+- ../rbac-namespace-default
+- ../kafka
+- ../zookeeper
+patchesJson6902:
+- target:
+    group: apps
+    version: v1
+    kind: StatefulSet
+    name: kafka
+  path: fsgroup-65534.yaml
+- target:
+    group: apps
+    version: v1
+    kind: StatefulSet
+    name: pzoo
+  path: fsgroup-65534.yaml
+- target:
+    group: apps
+    version: v1
+    kind: StatefulSet
+    name: zoo
+  path: fsgroup-65534.yaml
+# https://github.com/kubernetes-sigs/kustomize/issues/915#issuecomment-477808963
+patchesStrategicMerge:
+- nonroot-image-kafka.yaml
+- nonroot-image-zookeeper.yaml

nonroot/nonroot-image-kafka.yaml

@@ -0,0 +1,10 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: kafka
+spec:
+  template:
+    spec:
+      containers:
+      - name: broker
+        image: solsson/kafka:nonroot-2.4.0@sha256:b7dbda9f1941711239fbc3095ea49ba74715a9b2e2e8ce9185106c2e878c06aa

nonroot/nonroot-image-zookeeper.yaml

@@ -0,0 +1,21 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: pzoo
+spec:
+  template:
+    spec:
+      containers:
+      - name: zookeeper
+        image: solsson/kafka:nonroot-2.4.0@sha256:b7dbda9f1941711239fbc3095ea49ba74715a9b2e2e8ce9185106c2e878c06aa
+---
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: zoo
+spec:
+  template:
+    spec:
+      containers:
+      - name: zookeeper
+        image: solsson/kafka:nonroot-2.4.0@sha256:b7dbda9f1941711239fbc3095ea49ba74715a9b2e2e8ce9185106c2e878c06aa

variants/scale-1/kustomization.yaml

@@ -1,7 +1,5 @@
 bases:
-- ../../rbac-namespace-default
-- ../../kafka
-- ../../zookeeper
+- ../../nonroot
 patchesStrategicMerge:
 - kafka.yaml
 - zookeeper.yaml

variants/scale-2/kustomization.yaml

@@ -1,7 +1,5 @@
 bases:
-- ../../rbac-namespace-default
-- ../../kafka
-- ../../zookeeper
+- ../../nonroot
 patchesStrategicMerge:
 - kafka.yaml
 - zookeeper.yaml

variants/scale-3-5/kustomization.yaml

@@ -1,4 +1,2 @@
 bases:
-- ../../rbac-namespace-default
-- ../../kafka
-- ../../zookeeper
+- ../../nonroot