This commit is contained in:
2023-10-18 18:21:30 +02:00
parent 2197dd83a0
commit 1fac3163f7
3 changed files with 55 additions and 67 deletions

View File

@@ -40,23 +40,20 @@ resource "kubectl_manifest" "deploy" {
securityContext:
fsGroup: 1000
runAsGroup: 1000
runAsUser: 0
runAsUser: 1000
containers:
- name: dbgate
securityContext:
fsGroup: 1000
runAsGroup: 1000
runAsNonRoot: false
runAsUser: 0
runAsNonRoot: true
runAsUser: 1000
envFrom:
- secretRef:
name: "${var.component}-${var.instance}"
- configMapRef:
name: "${var.component}-${var.instance}"
env: ${jsonencode(local.deploy-envs)}
command:
- "/bin/bash"
- "/start.sh"
image: "${var.images.dbgate.registry}/${var.images.dbgate.repository}:${var.images.dbgate.tag}"
imagePullPolicy: "${var.images.dbgate.pullPolicy}"
ports:
@@ -87,9 +84,6 @@ resource "kubectl_manifest" "deploy" {
readOnly: true
- name: data
mountPath: /home/node/.dbgate
- name: init
mountPath: "/start.sh"
subPath: "start.sh"
restartPolicy: Always
volumes:
- name: certs
@@ -101,9 +95,5 @@ resource "kubectl_manifest" "deploy" {
claimName: "${var.component}-${var.instance}"
- name: run
emptyDir: {}
- name: init
configMap:
name: "${var.component}-${var.instance}-init"
defaultMode: 0777
EOF
}