fix(umami): don't mount root FS read-only
All checks were successful
Renovate / renovate (push) Successful in 21s
All checks were successful
Renovate / renovate (push) Successful in 21s
This commit is contained in:
parent
493d52ad41
commit
6c7f7d4505
1 changed files with 2 additions and 14 deletions
|
@ -36,17 +36,12 @@ spec:
|
|||
- containerPort: 3000
|
||||
protocol: TCP
|
||||
name: web
|
||||
volumeMounts:
|
||||
- name: next-cache
|
||||
mountPath: /data/.next/cache
|
||||
- name: node-cache
|
||||
mountPath: /home/node/.cache
|
||||
securityContext:
|
||||
allowPrivilegeEscalation: false
|
||||
capabilities:
|
||||
drop:
|
||||
- ALL
|
||||
readOnlyRootFilesystem: true
|
||||
readOnlyRootFilesystem: false
|
||||
affinity:
|
||||
nodeAffinity:
|
||||
preferredDuringSchedulingIgnoredDuringExecution:
|
||||
|
@ -60,11 +55,4 @@ spec:
|
|||
securityContext:
|
||||
runAsUser: 1000
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
volumes:
|
||||
- name: next-cache
|
||||
emptyDir:
|
||||
sizeLimit: 250Mi
|
||||
- name: node-cache
|
||||
emptyDir:
|
||||
sizeLimit: 1500Mi
|
||||
runAsNonRoot: true
|
Loading…
Reference in a new issue