bluejay/bluejay-infra
1
0
Fork 0
Code Issues Pull Requests 15 Actions Packages Projects Releases Wiki Activity

Deploy Media SEC-5 non-root image to GX10

Browse Source
This commit is contained in:
Andrew Stoltz
2026-06-17 08:47:40 -05:00
parent 18f4f657f8
commit ed32a65873
1 changed files with 54 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

77
apps-gx10/fc-media/deployment-fc-media-web.json
View File

@@ -92,7 +92,7 @@
} }
} }
], ],
"image": "localhost/fc-media-web:gx10-v1", "image": "localhost/fc-media-web:v20260617-sec5-media-f9228d2",
"imagePullPolicy": "Never", "imagePullPolicy": "Never",
"livenessProbe": { "livenessProbe": {
"failureThreshold": 3, "failureThreshold": 3,
@@ -138,17 +138,26 @@
"successThreshold": 1, "successThreshold": 1,
"timeoutSeconds": 1 "timeoutSeconds": 1
}, },
"resources": { "resources": {
"limits": { "limits": {
"cpu": "4", "cpu": "4",
"memory": "4Gi" "memory": "4Gi"
}, },
"requests": { "requests": {
"cpu": "500m", "cpu": "500m",
"memory": "1Gi" "memory": "1Gi"
} }
}, },
"startupProbe": { "securityContext": {
"allowPrivilegeEscalation": false,
"capabilities": {
"drop": [
"ALL"
]
},
"readOnlyRootFilesystem": true
},
"startupProbe": {
"failureThreshold": 18, "failureThreshold": 18,
"httpGet": { "httpGet": {
"httpHeaders": [ "httpHeaders": [
@@ -187,17 +196,31 @@
"name": "media-library", "name": "media-library",
"readOnly": true "readOnly": true
}, },
{ {
"mountPath": "/media/inbox", "mountPath": "/media/inbox",
"name": "media-inbox" "name": "media-inbox"
} },
] {
"mountPath": "/tmp",
"name": "temp"
},
{
"mountPath": "/app/logs",
"name": "logs"
}
]
} }
], ],
"dnsPolicy": "ClusterFirst", "dnsPolicy": "ClusterFirst",
"restartPolicy": "Always", "restartPolicy": "Always",
"schedulerName": "default-scheduler", "schedulerName": "default-scheduler",
"securityContext": {}, "securityContext": {
"fsGroup": 1654,
"fsGroupChangePolicy": "OnRootMismatch",
"runAsGroup": 1654,
"runAsNonRoot": true,
"runAsUser": 1654
},
"terminationGracePeriodSeconds": 30, "terminationGracePeriodSeconds": 30,
"volumes": [ "volumes": [
{ {
@@ -227,15 +250,23 @@
"server": "10.0.58.3" "server": "10.0.58.3"
} }
}, },
{ {
"name": "media-library", "name": "media-library",
"nfs": { "nfs": {
"path": "/volume1/video", "path": "/volume1/video",
"readOnly": true, "readOnly": true,
"server": "10.0.58.3" "server": "10.0.58.3"
} }
} },
] {
"emptyDir": {},
"name": "temp"
},
{
"emptyDir": {},
"name": "logs"
}
]
} }
} }
} }