Update cyberchef application version to 11.4.0
Major jump 10.22.1 -> 11.4.0: the upstream image switched to nginxinc/nginx-unprivileged (serving port 80 -> 8080, pid/temp dirs under /tmp). Adjust container port, writable-volume mounts and the pod security context (sysctl net.ipv4.ip_unprivileged_port_start no longer needed). Chart major bump 4.1.0 -> 5.0.0 accordingly.
This commit is contained in:
3 files changed
+11
-19
No files matched your search
@@ -25,14 +25,12 @@ spec:
|
||||
securityContext:
|
||||
{{- toYaml .Values.cyberchef.securityContext.container | nindent 12 }}
|
||||
volumeMounts:
|
||||
# nginx needs writable cache/temp dirs and a writable pid file
|
||||
# location when the root filesystem is read-only.
|
||||
- name: nginx-cache
|
||||
mountPath: /var/cache/nginx
|
||||
- name: nginx-run
|
||||
mountPath: /run
|
||||
# nginx-unprivileged keeps its pid file and temp/cache dirs under
|
||||
# /tmp, which needs to be writable with a read-only root filesystem.
|
||||
- name: tmp
|
||||
mountPath: /tmp
|
||||
ports:
|
||||
- containerPort: 80
|
||||
- containerPort: 8080
|
||||
protocol: TCP
|
||||
name: http
|
||||
livenessProbe:
|
||||
@@ -44,8 +42,6 @@ spec:
|
||||
resources:
|
||||
{{- include "cyberchef.resources" .Values.cyberchef.resources | nindent 12 }}
|
||||
volumes:
|
||||
- name: nginx-cache
|
||||
emptyDir: {}
|
||||
- name: nginx-run
|
||||
- name: tmp
|
||||
emptyDir: {}
|
||||
restartPolicy: Always
|
||||
Reference in new issue
Block a user