From 33e59745d09731074dd9af14a6a0dab9b3c553fa Mon Sep 17 00:00:00 2001
From: David Jeffers <david@dajeffers.com>
Date: Tue, 1 Apr 2025 01:46:30 -0400
Subject: [PATCH] Trying some nginx pod fixes

---
 clusterprism_halloween_values.yaml | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/clusterprism_halloween_values.yaml b/clusterprism_halloween_values.yaml
index ef6eb81..b633d5f 100644
--- a/clusterprism_halloween_values.yaml
+++ b/clusterprism_halloween_values.yaml
@@ -45,8 +45,36 @@ initContainers:
       capabilities:
         drop:
           - ALL
+        add:
+          - CHOWN
+          - DAV_OVERRIDE
+          - SETGID
+          - SETUID
+          - NET_BIND_SERVICE
       seccompProfile:
         type: "RuntimeDefault"
+    volumeMounts:
+      - mountPath: /var/cache/nginx
+        name: cache-volume
+      - mountPath: /var/run
+        name: run-volume
+      # - mountPath: nginx-conf
+      #   name: nginx-conf
+      #   subPath: default.conf
+      #   readOnly: true
+    volumes:
+      - name: cache-volume
+        emptyDir:
+          sizeLimit: 500Mi
+      - name: run-volume
+        emptyDir:
+          sizeLimit: 500Mi
+      # - name: nginx-conf
+      #   configMap:
+      #     name: nginx-conf
+      #     items:
+      #       - key: nginx.conf
+      #         path: nginx.conf
 
 monitor:
   enabled: true