Skip to content

Commit c53dfac

Browse files
committed
Update charts
Move hardcoded securityContext and resources to values.yaml - Including the same key twice(once hardcoded and once conditionally from values) resulted in yaml unmarshal errors
1 parent bd93fac commit c53dfac

File tree

4 files changed

+9
-21
lines changed

4 files changed

+9
-21
lines changed

charts/anvilops/Chart.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ type: application
1515
# This is the chart version. This version number should be incremented each time you make changes
1616
# to the chart and its templates, including the app version.
1717
# Versions are expected to follow Semantic Versioning (https://semver.org/)
18-
version: 0.1.1
18+
version: 0.1.2
1919

2020
# This is the version number of the application being deployed. This version number should be
2121
# incremented each time you make changes to the application. Versions are not expected to

charts/anvilops/templates/anvilops/anvilops-deployment.yaml

Lines changed: 0 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,6 @@ spec:
4141
{{- end }}
4242
image: {{ .Values.anvilops.image | quote }}
4343
imagePullPolicy: {{ .Values.anvilops.imagePullPolicy }}
44-
args: ["./src/index.ts"]
4544
ports:
4645
- name: http
4746
containerPort: 3000
@@ -239,21 +238,6 @@ spec:
239238
- name: REGISTRY_PROTOCOL
240239
value: {{ . }}
241240
{{- end }}
242-
securityContext:
243-
capabilities:
244-
drop: [ALL]
245-
runAsNonRoot: true
246-
runAsUser: 65532
247-
runAsGroup: 65532
248-
readOnlyRootFilesystem: true
249-
allowPrivilegeEscalation: false
250-
resources:
251-
requests:
252-
cpu: 512m
253-
memory: 512Mi
254-
limits:
255-
cpu: 1000m
256-
memory: 1Gi
257241
volumes:
258242
- name: cluster-config
259243
configMap:

charts/anvilops/values.yaml

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,9 +30,13 @@ anvilops:
3030
fullnameOverride: ""
3131

3232
securityContext:
33-
runAsUser: 1001
34-
runAsGroup: 1001
33+
capabilities:
34+
drop: [ALL]
3535
runAsNonRoot: true
36+
runAsUser: 65532
37+
runAsGroup: 65532
38+
readOnlyRootFilesystem: true
39+
allowPrivilegeEscalation: false
3640

3741
# This section builds out the service account more information can be found here: https://kubernetes.io/docs/concepts/security/service-accounts/
3842
serviceAccount:
@@ -69,7 +73,7 @@ anvilops:
6973

7074
resources:
7175
requests:
72-
cpu: 500m
76+
cpu: 512m
7377
memory: 512Mi
7478
limits:
7579
cpu: 1000m

charts/spilo/Chart.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
apiVersion: v1
22
name: spilo
3-
description: A minimal Spilo/Patroni HA Postgres deployment.
3+
description: A minimal Spilo/Patroni HA Postgres deployment, adapted from https://github.com/zalando/spilo/kubernetes.
44
type: application
55
version: 0.1.1
66
annotations:

0 commit comments

Comments
 (0)