feat(voucher-vault): fixed security-policies

This commit is contained in:
jklein committed 2026-04-13 21:28:41 +02:00
1 parent d66092d9e5
commit 78df9dce6a
3 files changed
+13 -33

No files matched your search

+6 -32
View File
@@ -14,45 +14,19 @@ voucherVault:
memory: 384Mi
ephemeral-storage: 100Mi
# TODO: Refine liness, readiness, startup probes
livenessProbe:
httpGet:
path: /
port: http
initialDelaySeconds: 10
periodSeconds: 10
timeoutSeconds: 5
failureThreshold: 3
readinessProbe:
httpGet:
path: /
port: http
initialDelaySeconds: 10
periodSeconds: 10
timeoutSeconds: 5
failureThreshold: 3
startupProbe:
httpGet:
path: /
port: http
initialDelaySeconds: 30
periodSeconds: 10
timeoutSeconds: 5
failureThreshold: 3
livenessProbe: null
readinessProbe: null
startupProbe: null
securityContext:
pod:
runAsNonRoot: true
runAsUser: 20000
runAsGroup: 1000
fsGroup: 1000
runAsUser: 33
runAsGroup: 33
fsGroup: 33
fsGroupChangePolicy: Always
container:
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
runAsNonRoot: true
capabilities:
drop:
- ALL
add: []
ports:
- containerPort: 8000
protocol: TCP