Merge branch '305-use-prometheus-default-securitycontext' into 'master'

Resolve "Use prometheus' default securityContext"

Closes #305

See merge request openappstack/openappstack!117

ansible/roles/apps/tasks/helmfiles.yml

@@ -39,6 +39,25 @@
     - servicemonitor.crd.yaml
     - podmonitor.crd.yaml
 
+- name: Get prometheus PV name
+  tags:
+    - prometheus
+  shell: "kubectl -n oas get pvc prometheus-prometheus-oas-{{ release_name }}-prometheus-promet-prometheus-0 -o=jsonpath='{.spec.volumeName}'"
+  register: prometheus_pv_name
+  failed_when: false
+  changed_when: false
+
+# Needed because previously we ran prometheus as root
+- name: Ensure prometheus volume is accessible by the prometheus pod
+  tags:
+    - prometheus
+  file:
+    dest: "{{ data_directory }}/local-storage/{{ prometheus_pv_name.stdout }}"
+    owner: '1000'
+    group: '2000'
+    recurse: true
+  when: prometheus_pv_name.stdout
+
 - name: Apply storage helmfile
   tags:
     - helmfile