bluejay/bluejay-infra
1
0
Fork 0
Code Issues Pull Requests 15 Actions Packages Projects Releases Wiki Activity

deploy(segmentdisplay): roll non-root GX10 image

Browse Source
This commit is contained in:
Andrew Stoltz
2026-06-17 10:52:19 -05:00
parent 0020aa97ce
commit dfaae3cbce
1 changed files with 57 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

80
apps-gx10/fc-segmentdisplay/deployment-segmentdisplay-web.json
View File

@@ -49,8 +49,8 @@
} }
} }
], ],
"image": "localhost/fc-segmentdisplay-web:gx10-v1", "image": "localhost/fc-segmentdisplay-web:v20260617-sec5-segmentdisplay-7730fb2",
"imagePullPolicy": "Never", "imagePullPolicy": "Never",
"livenessProbe": { "livenessProbe": {
"failureThreshold": 3, "failureThreshold": 3,
"httpGet": { "httpGet": {
@@ -63,8 +63,8 @@
"successThreshold": 1, "successThreshold": 1,
"timeoutSeconds": 5 "timeoutSeconds": 5
}, },
"name": "segmentdisplay-web", "name": "segmentdisplay-web",
"ports": [ "ports": [
{ {
"containerPort": 8080, "containerPort": 8080,
"name": "http", "name": "http",
@@ -83,31 +83,65 @@
"successThreshold": 1, "successThreshold": 1,
"timeoutSeconds": 5 "timeoutSeconds": 5
}, },
"resources": {}, "resources": {},
"terminationMessagePath": "/dev/termination-log", "securityContext": {
"terminationMessagePolicy": "File", "allowPrivilegeEscalation": false,
"volumeMounts": [ "capabilities": {
{ "drop": [
"mountPath": "/data", "ALL"
"name": "data" ]
} },
] "readOnlyRootFilesystem": true,
} "runAsGroup": 1654,
"runAsNonRoot": true,
"runAsUser": 1654
},
"terminationMessagePath": "/dev/termination-log",
"terminationMessagePolicy": "File",
"volumeMounts": [
{
"mountPath": "/data",
"name": "data"
},
{
"mountPath": "/tmp",
"name": "tmp"
},
{
"mountPath": "/app/logs",
"name": "logs"
}
]
}
], ],
"dnsPolicy": "ClusterFirst", "dnsPolicy": "ClusterFirst",
"restartPolicy": "Always", "restartPolicy": "Always",
"schedulerName": "default-scheduler", "schedulerName": "default-scheduler",
"securityContext": {}, "securityContext": {
"fsGroup": 1654,
"fsGroupChangePolicy": "OnRootMismatch",
"runAsGroup": 1654,
"runAsNonRoot": true,
"runAsUser": 1654
},
"terminationGracePeriodSeconds": 30, "terminationGracePeriodSeconds": 30,
"volumes": [ "volumes": [
{ {
"name": "data", "name": "data",
"persistentVolumeClaim": { "persistentVolumeClaim": {
"claimName": "segmentdisplay-web-data" "claimName": "segmentdisplay-web-data"
} }
} },
] {
} "emptyDir": {},
"name": "tmp"
},
{
"emptyDir": {},
"name": "logs"
}
]
}
} }
} }
} }