This commit is contained in:
2023-10-15 18:55:30 +02:00
parent d0cccb5177
commit 43a2a4f209
3 changed files with 109 additions and 81 deletions

View File

@@ -22,8 +22,7 @@ resource "kubectl_manifest" "deploy" {
securityContext:
fsGroup: 1000
runAsGroup: 1000
runAsNonRoot: true
runAsUser: 1000
runAsUser: 0
envFrom:
- secretRef:
name: "${var.component}-${var.instance}"
@@ -42,6 +41,8 @@ resource "kubectl_manifest" "deploy" {
secretKeyRef:
name: "${var.component}-${var.instance}-secret"
key: client-secret
command:
- /start.sh
image: "${var.images.dbgate.registry}/${var.images.dbgate.repository}:${var.images.dbgate.tag}"
imagePullPolicy: "${var.images.dbgate.pullPolicy}"
ports:
@@ -72,6 +73,9 @@ resource "kubectl_manifest" "deploy" {
readOnly: true
- name: data
mountPath: /home/node/.dbgate
- name: init
mountPath: "/start.sh"
subPath: "start.sh"
restartPolicy: Always
securityContext:
fsGroup: 1000
@@ -88,5 +92,9 @@ resource "kubectl_manifest" "deploy" {
claimName: "${var.component}-${var.instance}"
- name: run
emptyDir: {}
- name: init
configMap:
name: "${var.component}-${var.instance}-init"
defaultMode: 0777
EOF
}