Resolve "Update to define Extra Volumes, VolumeMounts, and InitContainers"

General MR

Summary

To add additional volumes, volume mounts and init containers to fortify

Relevant logs/screenshots

Showing an extra init container that created a file in an extra volume mount:

Linked Issue

issue

Upgrade Notices

N/A

added community-contribution fortify kindenhancement priority5 statusdoing teamDevelopment & Ops labels

assigned to @nbazzeghin

changed the description

added 2 commits

• e6122b69 - added additional configs for extra volumes, volume mounts and init containers
• 45a52374 - bump chart version

Compare with previous version

changed the description

Big Bang Smoke Test big-bang/bigbang!5032 (closed)

marked this merge request as ready

added statusreview label and removed statusdoing label

requested review from @alfredodiaz53, @cschaefer, @daniel.stocum, @dpritchettrm, @matt.vasquez, and @nbazzeghin

removed review request for @nbazzeghin

spinning this up on my local dev cluster to try it out

Booted up fine with the following overrides to appease kyverno:

addons:
  fortify:
    values:
      webapp:
        extraVolumes:
          - name: extra-volume1
            emptyDir: {}
        extraVolumeMounts:
          - name: extra-volume1
            mountPath: "/ev-1"
        extraInitContainers:
          - name: extra-container1
            image: "registry1.dso.mil/ironbank/google/golang/golang-1.20:1.20.14"
            securityContext:
              capabilities:
                drop:
                  - ALL
              fsGroup: 1111
              fsGroupChangePolicy: OnRootMismatch
              runAsUser: 1111
              runAsGroup: 1111
              runAsNonRoot: true
            imagePullPolicy: IfNotPresent
            command:
              - touch
            args:
              - /ev-1/from-extra-init-container
            volumeMounts:
              - name: extra-volume1
                mountPath: /ev-1

Testing the upgrade flow next

Installed from main without this MR's customizations:

Successfully booted fortify ssc with the extra container and volumes:

approved this merge request

merged

mentioned in commit b7f54bf3

mentioned in merge request big-bang/bigbang!5041 (merged)