helm chart improvements #425

Merged
maximilien merged 8 commits from patrickjahns/garage:helm-improvements into main 2023-01-27 10:51:05 +00:00
2 changed files with 8 additions and 5 deletions
Showing only changes of commit fd03b184b3 - Show all commits

View file

@ -41,6 +41,8 @@ spec:
secretKeyRef:
name: {{ include "garage.rpcSecretName" . }}
key: rpcSecret
securityContext:
{{- toYaml .Values.securityContext | nindent 12 }}
volumeMounts:
- name: configmap
mountPath: /mnt/garage.toml

View file

@ -92,8 +92,11 @@ serviceAccount:
podAnnotations: {}
podSecurityContext: {}
# fsGroup: 2000
podSecurityContext:
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
runAsNonRoot: true
securityContext:
# The default security context is heavily restricted
@ -102,8 +105,6 @@ securityContext:
drop:
- ALL
readOnlyRootFilesystem: true
runAsNonRoot: true
runAsUser: 1000
service:
# You can rely on any service to expose your cluster