cp-2881 setting to non root, bumping to latest iamge tag,

wip - need to make   runAsUser: 1001 conditional for AKS only

Author: nimeshjm

README.md

@@ -121,3 +121,17 @@ helm upgrade cloudbolt-collector cloudbolt-collector/cloudbolt-collector \
   --set IMAGE_VERSION=$IMAGE_VERSION \
   --set INGESTION_API_URL=$INGESTION_API_URL
 ```
+
+
+
+
+export PROMETHEUS_BASE_URL="http://prometheus-kube-prometheus-prometheus.monitoring.svc.cluster.local:9090"
+export COREAPI_BASE_URL="https://kubernetes.default.svc"
+export INGESTION_API_URL="https://gn36i03mq1.execute-api.eu-west-2.amazonaws.com/v1/data/ingest"
+kubectl create secret generic cb-ingestion-token \
+  --from-literal=INGESTION_API_TOKEN=hahaha \
+  -n cloudbolt-collector
+
+helm upgrade --install cloudbolt-collector ./ -f values.yaml --namespace cloudbolt-collector --create-namespace --set INGESTION_API_URL=$INGESTION_API_URL --set prometheusBaseUrl=$PROMETHEUS_BASE_URL --set coreapiBaseUrl=$COREAPI_BASE_URL --set DEBUG=true
+
+helm upgrade --install cloudbolt-collector ./ -f values.yaml --namespace cloudbolt-collector --create-namespace --set INGESTION_API_URL="https://c1i3z7ha68.execute-api.us-west-2.amazonaws.com/v1/data-ingest-api-dev-v1" --set DEBUG=true

values.yaml

@@ -3,7 +3,7 @@
 # Declare variables to be passed into your templates.
 replicaCount: 1
 DEBUG: ""
-IMAGE_VERSION: "aks"
+IMAGE_VERSION: ""
 INGESTION_API_URL: ""
 
 # Optional: Base URL for Prometheus and CoreAPI (e.g. "http://prometheus.monitoring.svc.cluster.local:9090")
@@ -13,7 +13,7 @@ coreapiBaseUrl: ""
 image:
   repository: cloudboltsoftware/cloudbolt-collector
   pullPolicy: Always
-  tag: aks
+  tag: v0.46.0
 imagePullSecrets: []
 nameOverride: ""
 fullnameOverride: ""
@@ -26,15 +26,17 @@ serviceAccount:
 podAnnotations: {}
 podLabels: {}
 podSecurityContext:
-  runAsNonRoot: false
-  runAsUser: 0
+  runAsNonRoot: true
   seccompProfile:
     type: "RuntimeDefault"
 securityContext:
   allowPrivilegeEscalation: false
   capabilities:
     drop: ["ALL"]
-  runAsNonRoot: false
+  runAsNonRoot: true
+  # only for AKS
+  runAsUser: 1001
+  # endonly
   seccompProfile:
     type: "RuntimeDefault"
 service: