diff --git a/clusters/cl01tl/manifests/vault/ConfigMap-vault-snapshot-script.yaml b/clusters/cl01tl/manifests/vault/ConfigMap-vault-snapshot-script.yaml index b037c6c63..9942e5642 100644 --- a/clusters/cl01tl/manifests/vault/ConfigMap-vault-snapshot-script.yaml +++ b/clusters/cl01tl/manifests/vault/ConfigMap-vault-snapshot-script.yaml @@ -9,6 +9,7 @@ metadata: app.kubernetes.io/part-of: vault data: snapshot.sh: | + DATE=$(date +"%Y%m%d-%H-%M") MAX_RETRIES=5 SUCCESS=false @@ -45,7 +46,11 @@ data: echo " "; echo ">> Taking Vault snapsot ..."; - vault operator raft snapshot save /opt/backup/vault-snapshot-$(date +"%Y%m%d-%H-%M").snap + vault operator raft snapshot save /opt/backup/vault-snapshot-$DATE.snap + + echo " "; + echo ">> Setting ownership of Vault snapsot ..."; + chown 100:1000 /opt/backup/vault-snapshot-$DATE.snap echo " "; echo ">> Completed Vault snapshot"; diff --git a/clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml b/clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml index 5eaff918d..271f52729 100644 --- a/clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml +++ b/clusters/cl01tl/manifests/vault/CronJob-vault-snapshot.yaml @@ -31,9 +31,6 @@ spec: enableServiceLinks: false serviceAccountName: default automountServiceAccountToken: true - securityContext: - runAsGroup: 1000 - runAsUser: 100 hostIPC: false hostNetwork: false hostPID: false