[stacks-blockchain-api] set volume permissions security context, init…

…al support for api v6
hirosystems · Oct 5, 2022 · 05692d6 · 05692d6
1 parent 6ac7956
commit 05692d6
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 6 deletions.
diff --git a/hirosystems/stacks-blockchain-api/Chart.lock b/hirosystems/stacks-blockchain-api/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: stacks-blockchain
   repository: https://charts.hiro.so/hirosystems
-  version: 1.1.5
+  version: 1.1.6
 - name: postgresql
   repository: https://charts.bitnami.com/bitnami
-  version: 11.9.2
+  version: 11.9.7
 - name: common
   repository: https://charts.bitnami.com/bitnami
   version: 1.17.1
-digest: sha256:ba8466016c32d525b64b1707939de87d1bfbd24cb5f2b0a981f7e8ae2dbb2006
-generated: "2022-09-28T21:13:03.908325-04:00"
+digest: sha256:75a859b539cbbcc754ac9ae00ec91979fc635d4f336c27eba950279531ee481d
+generated: "2022-10-05T10:28:23.823053-04:00"
diff --git a/hirosystems/stacks-blockchain-api/Chart.yaml b/hirosystems/stacks-blockchain-api/Chart.yaml
@@ -41,4 +41,4 @@ sources:
   - https://github.com/hirosystems/stacks-blockchain-api
   - https://docs.hiro.so/api
   - https://docs.hiro.so/get-started/stacks-blockchain-api
-version: 1.1.5
+version: 1.1.6
diff --git a/hirosystems/stacks-blockchain-api/templates/api-writer/statefulset.yaml b/hirosystems/stacks-blockchain-api/templates/api-writer/statefulset.yaml
@@ -130,7 +130,7 @@ spec:
             - sh
             - -c
             - |
-              node ./lib/index.js export-events --file ${STACKS_EXPORT_EVENTS_FILE}
+              node ./lib/index.js export-events --file ${STACKS_EXPORT_EVENTS_FILE} --overwrite-file
           {{- if .Values.apiWriter.initContainerSecurityContext.enabled }}
           securityContext: {{- omit .Values.apiWriter.initContainerSecurityContext "enabled" | toYaml | nindent 12 }}
           {{- end }}
@@ -274,8 +274,10 @@ spec:
           securityContext: {{- omit .Values.apiWriter.containerSecurityContext "enabled" | toYaml | nindent 12 }}
           {{- end }}
           env:
+            {{- if semverCompare "< 6.0.0" .Values.apiWriter.image.tag }}
             - name: STACKS_EXPORT_EVENTS_FILE
               value: {{ .Values.apiWriter.persistence.data.mountPath }}/stacks-node-events.tsv
+            {{- end }}
             - name: STACKS_API_LOG_LEVEL
               value: {{ ternary "debug" "info" (or .Values.apiWriter.image.debug .Values.diagnosticMode.enabled) | quote }}
             - name: STACKS_CHAIN_ID

diff --git a/hirosystems/stacks-blockchain-api/values.yaml b/hirosystems/stacks-blockchain-api/values.yaml
@@ -471,6 +471,7 @@ apiWriter:
     ##   "auto" is especially useful for OpenShift which has scc with dynamic user ids (and 0 is not allowed)
     ##
     containerSecurityContext:
+      enabled: true
       runAsUser: 0
 
 ## Deploys a read-only API node which only reads from the PG DB, and does not accept