fix(nocodb): mount emptyDir at /tmp
All checks were successful
Renovate / renovate (push) Successful in 1m5s

This commit is contained in:
Peter 2024-06-26 08:15:10 +02:00
parent ea36bc6d4a
commit cb39b80946
Signed by: prskr
GPG key ID: F56BED6903BC5E37

View file

@ -17,51 +17,53 @@ spec:
app.kubernetes.io/name: nocodb
spec:
containers:
- name: nocodb
image: nocodb
envFrom:
- secretRef:
name: nocodb-config
ports:
- containerPort: 8080
protocol: TCP
name: web
volumeMounts:
- mountPath: /usr/app/data
name: nocodb-metadata
livenessProbe:
httpGet:
path: /api/v1/health
port: web
scheme: HTTP
initialDelaySeconds: 10
timeoutSeconds: 3
periodSeconds: 5
successThreshold: 1
failureThreshold: 3
readinessProbe:
httpGet:
path: /api/v1/health
port: web
scheme: HTTP
initialDelaySeconds: 5
timeoutSeconds: 3
periodSeconds: 5
successThreshold: 1
failureThreshold: 3
resources:
requests:
memory: "168Mi"
cpu: "50m"
limits:
memory: "256Mi"
cpu: "500m"
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
- name: nocodb
image: nocodb
envFrom:
- secretRef:
name: nocodb-config
ports:
- containerPort: 8080
protocol: TCP
name: web
volumeMounts:
- name: nocodb-metadata
mountPath: /usr/app/data
- name: tmp
mountPath: /tmp
livenessProbe:
httpGet:
path: /api/v1/health
port: web
scheme: HTTP
initialDelaySeconds: 10
timeoutSeconds: 3
periodSeconds: 5
successThreshold: 1
failureThreshold: 3
readinessProbe:
httpGet:
path: /api/v1/health
port: web
scheme: HTTP
initialDelaySeconds: 5
timeoutSeconds: 3
periodSeconds: 5
successThreshold: 1
failureThreshold: 3
resources:
requests:
memory: "168Mi"
cpu: "50m"
limits:
memory: "256Mi"
cpu: "500m"
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
readOnlyRootFilesystem: true
affinity:
nodeAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
@ -76,8 +78,11 @@ spec:
- name: nocodb-metadata
persistentVolumeClaim:
claimName: nocodb-metadata
- name: tmp
emptyDir:
sizeLimit: 50Mi
securityContext:
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
runAsNonRoot: true
runAsNonRoot: true