Rsync capability issue

[ta/caas-registry.git] / ansible / roles / swift / templates / update / swift_update.yml

diff --git a/ansible/roles/swift/templates/update/swift_update.yml b/ansible/roles/swift/templates/update/swift_update.yml
index 8f6f940..a98a5b9 100644 (file)
--- a/ansible/roles/swift/templates/update/swift_update.yml
+++ b/ansible/roles/swift/templates/update/swift_update.yml
@@ -28,6 +28,7 @@ spec:
       labels:
         name: swift-update
     spec:
+      priorityClassName: "system-cluster-critical"
       hostNetwork: true
       dnsPolicy: ClusterFirstWithHostNet
       nodeSelector:
@@ -39,13 +40,14 @@ spec:
           image: {{ container_image_names | select('search', '/swift') | list | last }}
           securityContext:
             capabilities:
-              add: ["NET_BIND_SERVICE"]
+              add: ["NET_BIND_SERVICE", "SETGID", "SETUID"]
           args:
             - BACKEND
           resources:
             limits:
               memory: "4Gi"
             requests:
+              cpu: "200m"
               memory: "1Gi"
           env:
             - name: "SWIFT_PART_POWER"
@@ -58,6 +60,8 @@ spec:
               value: "1"
             - name: "SWIFT_OAM1_IP"
               value: "{{ hostvars[groups.caas_master[0]]['networking']['infra_internal']['ip'] }}"
+            - name: "SWIFT_URL"
+              value: "{{ caas.swift }}"
           volumeMounts:
             - name: config
               mountPath: /etc/swift/