bluejay/bluejay-infra
1
0
Fork 0
Code Issues Pull Requests 15 Actions Packages Projects Releases Wiki Activity

deploy(mysql): roll non-root GX10 operator image

Browse Source
This commit is contained in:
Andrew Stoltz
2026-06-17 04:34:28 -05:00
parent b11f26b963
commit 8d55ca1566
1 changed files with 54 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

78
apps-gx10/fc-system/deployment-mysql-operator.json
View File

@@ -56,8 +56,8 @@
"value": "http://+:8080" "value": "http://+:8080"
} }
], ],
"image": "localhost/fc-mysql-operator:gx10-v1", "image": "localhost/fc-mysql-operator:v20260617-sec5-3c6649c",
"imagePullPolicy": "IfNotPresent", "imagePullPolicy": "Never",
"livenessProbe": { "livenessProbe": {
"failureThreshold": 3, "failureThreshold": 3,
"httpGet": { "httpGet": {
@@ -90,28 +90,58 @@
"successThreshold": 1, "successThreshold": 1,
"timeoutSeconds": 3 "timeoutSeconds": 3
}, },
"resources": { "resources": {
"limits": { "limits": {
"cpu": "500m", "cpu": "500m",
"memory": "512Mi" "memory": "512Mi"
}, },
"requests": { "requests": {
"cpu": "250m", "cpu": "250m",
"memory": "256Mi" "memory": "256Mi"
} }
}, },
"terminationMessagePath": "/dev/termination-log", "securityContext": {
"terminationMessagePolicy": "File" "allowPrivilegeEscalation": false,
} "capabilities": {
], "drop": [
"dnsPolicy": "ClusterFirst", "ALL"
"restartPolicy": "Always", ]
"schedulerName": "default-scheduler", },
"securityContext": {}, "readOnlyRootFilesystem": true
"serviceAccount": "mysql-operator", },
"serviceAccountName": "mysql-operator", "terminationMessagePath": "/dev/termination-log",
"terminationGracePeriodSeconds": 30 "terminationMessagePolicy": "File",
} "volumeMounts": [
{
"mountPath": "/tmp",
"name": "tmp"
}
]
}
],
"dnsPolicy": "ClusterFirst",
"restartPolicy": "Always",
"schedulerName": "default-scheduler",
"securityContext": {
"fsGroup": 1654,
"fsGroupChangePolicy": "OnRootMismatch",
"runAsGroup": 1654,
"runAsNonRoot": true,
"runAsUser": 1654,
"seccompProfile": {
"type": "RuntimeDefault"
}
},
"serviceAccount": "mysql-operator",
"serviceAccountName": "mysql-operator",
"terminationGracePeriodSeconds": 30,
"volumes": [
{
"emptyDir": {},
"name": "tmp"
}
]
}
} }
} }
} }