Moving .k8s files to .k8s/backend folder, and add securityContext to postgres helm.

Author: mcqueide

.k8s/deployment.yaml .k8s/backend/deployment.yaml.k8s/deployment.yaml renamed to .k8s/backend/deployment.yaml

@@ -49,4 +49,15 @@ spec:
           httpGet:
             path: /actuator/health
             port: 8080
-          periodSeconds: 20
+          periodSeconds: 20
+
+        securityContext:
+          allowPrivilegeEscalation: false
+          runAsNonRoot: true
+          runAsUser: 1000
+          capabilities:
+            drop:
+            - ALL
+          seccompProfile:
+            type: RuntimeDefault
+      

.k8s/api-env.yaml .k8s/backend/env.yaml.k8s/api-env.yaml renamed to .k8s/backend/env.yaml

@@ -4,7 +4,7 @@ metadata:
   name: api-env
 data:
   SPRING_PROFILES_ACTIVE: "docker"
-  SPRING_DATASOURCE_URL: "jdbc:postgresql://my-app-db:5432/people"
+  SPRING_DATASOURCE_URL: "jdbc:postgresql://people-db:5432/people"
   SPRING_DATASOURCE_USERNAME: "people"
   SPRING_DATASOURCE_PASSWORD: "people"
   JAVA_OPTS: "-XX:+UseG1GC -XX:MaxRAMPercentage=75"

.k8s/service.yaml .k8s/backend/service.yaml.k8s/service.yaml renamed to .k8s/backend/service.yaml

@@ -66,6 +66,8 @@ spec:
                 - -c
                 - pg_isready -U "$(POSTGRES_USER:-postgres)"
             periodSeconds: 20
+          securityContext:
+            allowPrivilegeEscalation: false
       volumes:
         - name: {{ .Release.Name }}-storage
           persistentVolumeClaim: