feat(umami): ignore events from localhost

2024-04-30 16:06:15 +02:00 · 2024-04-30 16:06:15 +02:00 · 893dfe69e7
commit 893dfe69e7
parent 48e9137489
2 changed files with 11 additions and 5 deletions
--- a/umami/config/umami.env
+++ b/umami/config/umami.env
--- a/umami/resources/deployment.yaml
+++ b/umami/resources/deployment.yaml
@ -37,6 +37,12 @@ spec:
            limits:
              memory: "384Mi"
              cpu: "250m"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            readOnlyRootFilesystem: true
      containers:
        - name: umami
          image: umami
@ -54,11 +60,11 @@ spec:
                name: umami-config
          resources:
            requests:
-              memory: "256Mi"
-              cpu: "50m"
+              memory: "64Mi"
+              cpu: "150m"
            limits:
-              memory: "384Mi"
-              cpu: "100m"
+              memory: "256Mi"
+              cpu: "300m"
          ports:
          - containerPort: 3000
            protocol: TCP
@ -80,7 +86,7 @@ spec:
            capabilities:
              drop:
                - ALL
-            readOnlyRootFilesystem: false
+            readOnlyRootFilesystem: true
      affinity:
        nodeAffinity:
          preferredDuringSchedulingIgnoredDuringExecution: