Update security context to allow frontend pod to start #6

Merged
konrad merged 2 commits from r1cebank/helm-chart:main into main 2023-05-04 21:39:43 +00:00
3 changed files with 7 additions and 5 deletions

View File

@ -10,7 +10,7 @@ description: |-
the high alpine areas of the Andes and a relative of the llama.
annotations:
category: TaskTracker
version: 0.1.3
version: 0.1.4
appVersion: 0.20.4
kubeVersion: ">= 1.19"
dependencies:

View File

@ -61,7 +61,7 @@ api:
config:
database:
# Use PostgreSQL database anyway
type: postgresql
type: postgres
vlasov-y marked this conversation as resolved
Review

According to this documentation paragraph , it has to be postgres, not postgresql. @konrad which value is corrent one?

According to [this](https://vikunja.io/docs/config-options/#type) documentation paragraph , it has to be `postgres`, not `postgresql`. @konrad which value is corrent one?
Review

postgres is correct.

`postgres` is correct.
Review

Okay, then this line is to be reverted @r1cebank

Okay, then this line is to be reverted @r1cebank
Review

postgres is the correct value, if i use postgresql the api will fail to start saying unknown database type. why it needs to be reverted?

the current documentation is using 'postgresql' which is incorrect, thats why I made the update to correct it

postgres is the correct value, if i use postgresql the api will fail to start saying unknown database type. why it needs to be reverted? the current documentation is using 'postgresql' which is incorrect, thats why I made the update to correct it
Review

Aaa, you are right :) I somewhy misunderstood the diff and thought that you change postgres to postgresql XD Sorry

Aaa, you are right :) I somewhy misunderstood the diff and thought that you change `postgres` to `postgresql` XD Sorry
Review

Haha no worries, I was a bit confused thought I missed something 🤣

Haha no worries, I was a bit confused thought I missed something 🤣
envFrom:
# Bind env variables from the secret
- name: VIKUNJA_DATABASE_USER

View File

@ -39,12 +39,14 @@ frontend:
# fsGroup: 1000
securityContext:
allowPrivilegeEscalation: false
runAsUser: 101 # nginx
r1cebank marked this conversation as resolved Outdated

Change #nginx to # nginx please

Change `#nginx` to `# nginx` please
capabilities:
drop:
- ALL
# readOnlyRootFilesystem: true
# runAsNonRoot: true
# runAsUser: 1000
add:
- NET_BIND_SERVICE
service:
type: ClusterIP