From: aravind.est <aravindhan.a@est.tech>
Date: Fri, 25 Apr 2025 11:51:56 +0000 (+0100)
Subject: Remove root permission for Kafka and Zookeeper pods
X-Git-Tag: l-release~24
X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=commitdiff_plain;h=6c7f924bf9a7cec2f6fb4b4a36678bf17b8b5df9;p=it%2Fdep.git

Remove root permission for Kafka and Zookeeper pods

Root permission removed for Kafka and Zookeeper pods
Volume mount used for these are given 777 permission.

Issue-ID: NONRTRIC-1020
Change-Id: I1029733ce982fb66de50a4c8db6aadc157711cfd
Signed-off-by: aravind.est <aravindhan.a@est.tech>
---

diff --git a/smo-install/helm-override/default/onap-override.yaml b/smo-install/helm-override/default/onap-override.yaml
index 2caf67ff..5ae9c58a 100644
--- a/smo-install/helm-override/default/onap-override.yaml
+++ b/smo-install/helm-override/default/onap-override.yaml
@@ -231,21 +231,3 @@ sdnc:
 strimzi:
   enabled: true
   replicaCount: 1
-  # This runs the kafka container with root privileges
-  # This is required because of the permission issues with the volume mount
-  # This should be re-eveluated once the permission issues are resolved
-  kafka:
-    template:
-      kafkaContainer:
-        securityContext:
-          runAsNonRoot: false
-          runAsUser: 0
-  # This runs the zookeeper container with root privileges
-  # This is required because of the permission issues with the volume mount
-  # This should be re-eveluated once the permission issues are resolved
-  zookeeper:
-    template:
-      zookeeperContainer:
-        securityContext:
-          runAsNonRoot: false
-          runAsUser: 0
\ No newline at end of file
diff --git a/smo-install/scripts/sub-scripts/preconfigure-smo.sh b/smo-install/scripts/sub-scripts/preconfigure-smo.sh
index ab118f6d..e4eba979 100644
--- a/smo-install/scripts/sub-scripts/preconfigure-smo.sh
+++ b/smo-install/scripts/sub-scripts/preconfigure-smo.sh
@@ -33,6 +33,8 @@ if [ $(kubectl get nodes --no-headers | wc -l) -gt 1 ]; then
     echo "sudo mkdir -p /dockerdata-nfs/onap/mariadb"
     echo "sudo mkdir -p /dockerdata-nfs/onap/elastic-master-0"
     echo "sudo mkdir -p /dockerdata-nfs/onap/cps-temporal/data"
+    echo "sudo mkdir -p /dockerdata-nfs/onap/strimzi-kafka/kafka-0"
+    echo "sudo mkdir -p /dockerdata-nfs/onap/strimzi-kafka/zk-0"    
     echo "sudo chmod -R 777 /dockerdata-nfs"
     echo "-------------------------------------------------------------------------------------------"
 fi
@@ -42,6 +44,8 @@ sudo mkdir -p /dockerdata-nfs/onap
 sudo mkdir -p /dockerdata-nfs/onap/mariadb
 sudo mkdir -p /dockerdata-nfs/onap/elastic-master-0
 sudo mkdir -p /dockerdata-nfs/onap/cps-temporal/data
+sudo mkdir -p /dockerdata-nfs/onap/strimzi-kafka/kafka-0
+sudo mkdir -p /dockerdata-nfs/onap/strimzi-kafka/zk-0
 sudo chmod -R 777 /dockerdata-nfs
 
 # Mariadb operator installation