fix(umami): don't mount root FS read-only
All checks were successful
Renovate / renovate (push) Successful in 21s
All checks were successful
Renovate / renovate (push) Successful in 21s
This commit is contained in:
parent
493d52ad41
commit
6c7f7d4505
1 changed files with 2 additions and 14 deletions
|
@ -36,17 +36,12 @@ spec:
|
||||||
- containerPort: 3000
|
- containerPort: 3000
|
||||||
protocol: TCP
|
protocol: TCP
|
||||||
name: web
|
name: web
|
||||||
volumeMounts:
|
|
||||||
- name: next-cache
|
|
||||||
mountPath: /data/.next/cache
|
|
||||||
- name: node-cache
|
|
||||||
mountPath: /home/node/.cache
|
|
||||||
securityContext:
|
securityContext:
|
||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
capabilities:
|
capabilities:
|
||||||
drop:
|
drop:
|
||||||
- ALL
|
- ALL
|
||||||
readOnlyRootFilesystem: true
|
readOnlyRootFilesystem: false
|
||||||
affinity:
|
affinity:
|
||||||
nodeAffinity:
|
nodeAffinity:
|
||||||
preferredDuringSchedulingIgnoredDuringExecution:
|
preferredDuringSchedulingIgnoredDuringExecution:
|
||||||
|
@ -61,10 +56,3 @@ spec:
|
||||||
runAsUser: 1000
|
runAsUser: 1000
|
||||||
runAsGroup: 1000
|
runAsGroup: 1000
|
||||||
runAsNonRoot: true
|
runAsNonRoot: true
|
||||||
volumes:
|
|
||||||
- name: next-cache
|
|
||||||
emptyDir:
|
|
||||||
sizeLimit: 250Mi
|
|
||||||
- name: node-cache
|
|
||||||
emptyDir:
|
|
||||||
sizeLimit: 1500Mi
|
|
Loading…
Reference in a new issue