forked from vikunja/helm-chart
update security context to allow frontend pod to start
This commit is contained in:
parent
1e81af0512
commit
29190213e5
|
@ -10,7 +10,7 @@ description: |-
|
|||
the high alpine areas of the Andes and a relative of the llama.
|
||||
annotations:
|
||||
category: TaskTracker
|
||||
version: 0.1.3
|
||||
version: 0.1.4
|
||||
appVersion: 0.20.4
|
||||
kubeVersion: ">= 1.19"
|
||||
dependencies:
|
||||
|
|
|
@ -61,7 +61,7 @@ api:
|
|||
config:
|
||||
database:
|
||||
# Use PostgreSQL database anyway
|
||||
type: postgresql
|
||||
type: postgres
|
||||
envFrom:
|
||||
# Bind env variables from the secret
|
||||
- name: VIKUNJA_DATABASE_USER
|
||||
|
|
|
@ -39,12 +39,14 @@ frontend:
|
|||
# fsGroup: 1000
|
||||
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: true
|
||||
runAsUser: 101 #nginx
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
# readOnlyRootFilesystem: true
|
||||
# runAsNonRoot: true
|
||||
# runAsUser: 1000
|
||||
add:
|
||||
- NET_BIND_SERVICE
|
||||
|
||||
|
||||
service:
|
||||
type: ClusterIP
|
||||
|
|
Loading…
Reference in New Issue