infrastructure/apps
1
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions

fix(nocodb): mount emptyDir at /tmp
All checks were successful
Renovate / renovate (push) Successful in 1m5s
Details

Browse source
This commit is contained in:
Peter 2024-06-26 08:15:10 +02:00
parent ea36bc6d4a
commit cb39b80946
Signed by: prskr
GPG key ID: F56BED6903BC5E37
1 changed files with 51 additions and 46 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

97
nocodb/resources/deployment.yaml
View file

@ -17,51 +17,53 @@ spec:
app.kubernetes.io/name: nocodb app.kubernetes.io/name: nocodb
spec: spec:
containers: containers:
- name: nocodb - name: nocodb
image: nocodb image: nocodb
envFrom: envFrom:
- secretRef: - secretRef:
name: nocodb-config name: nocodb-config
ports: ports:
- containerPort: 8080 - containerPort: 8080
protocol: TCP protocol: TCP
name: web name: web
volumeMounts: volumeMounts:
- mountPath: /usr/app/data - name: nocodb-metadata
name: nocodb-metadata mountPath: /usr/app/data
livenessProbe: - name: tmp
httpGet: mountPath: /tmp
path: /api/v1/health livenessProbe:
port: web httpGet:
scheme: HTTP path: /api/v1/health
initialDelaySeconds: 10 port: web
timeoutSeconds: 3 scheme: HTTP
periodSeconds: 5 initialDelaySeconds: 10
successThreshold: 1 timeoutSeconds: 3
failureThreshold: 3 periodSeconds: 5
readinessProbe: successThreshold: 1
httpGet: failureThreshold: 3
path: /api/v1/health readinessProbe:
port: web httpGet:
scheme: HTTP path: /api/v1/health
initialDelaySeconds: 5 port: web
timeoutSeconds: 3 scheme: HTTP
periodSeconds: 5 initialDelaySeconds: 5
successThreshold: 1 timeoutSeconds: 3
failureThreshold: 3 periodSeconds: 5
resources: successThreshold: 1
requests: failureThreshold: 3
memory: "168Mi" resources:
cpu: "50m" requests:
limits: memory: "168Mi"
memory: "256Mi" cpu: "50m"
cpu: "500m" limits:
securityContext: memory: "256Mi"
allowPrivilegeEscalation: false cpu: "500m"
capabilities: securityContext:
drop: allowPrivilegeEscalation: false
- ALL capabilities:
readOnlyRootFilesystem: true drop:
- ALL
readOnlyRootFilesystem: true
affinity: affinity:
nodeAffinity: nodeAffinity:
preferredDuringSchedulingIgnoredDuringExecution: preferredDuringSchedulingIgnoredDuringExecution:
@ -76,8 +78,11 @@ spec:
- name: nocodb-metadata - name: nocodb-metadata
persistentVolumeClaim: persistentVolumeClaim:
claimName: nocodb-metadata claimName: nocodb-metadata
- name: tmp
emptyDir:
sizeLimit: 50Mi
securityContext: securityContext:
runAsUser: 1000 runAsUser: 1000
runAsGroup: 1000 runAsGroup: 1000
fsGroup: 1000 fsGroup: 1000
runAsNonRoot: true runAsNonRoot: true