Files
static-site-helpers/clusterprism_halloween_values.yaml
David Jeffers 9fc05cd47b
All checks were successful
continuous-integration/drone/push Build is passing
Adding security settings to initcontainer
2025-03-23 14:03:24 -04:00

61 lines
1.3 KiB
YAML

---
podSecurityContext:
runAsUser: 2000
runAsGroup: 2000
fsGroup: 2000
fsGroupChangePolicy: "OnRootMismatch"
runAsNonRoot: true
securityContext:
privileged: false
allowPrivilegeEscalation: false
readOnlyRootFilesystem: false
capabilities:
drop:
- ALL
seccompProfile:
type: "RuntimeDefault"
ingress:
host: halloween.dajeffers.com
ingressClassName: nginx
tlsEnabled: true
annotations:
cert-manager.io/cluster-issuer: letsencrypt-cloudflare-prod
initContainers:
- name: init-con
securityContext:
privileged: false
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: "RuntimeDefault"
resources:
requests:
cpu: null
memory: 200Mi
limits:
cpu: 200m
memory: 200Mi
# values to build and deploy static sites
gitCloneUrl: ssh://git@git.sadmin.pro:2222/DaJeffers/halloween.dajeffers.com.git
# yamllint disable rule:line-length
buildScript: |
# !/usr/bin/env bash
# pre -reqs
apt-get update && apt-get install -y wget
# Setting up Hugo
wget https://github.com/gohugoio/hugo/releases/download/v0.145.0/hugo_0.145.0_linux-arm64.tar.gz &&
tar -xzf hugo_0.145.0_linux-arm64.tar.gz &&
chmod +x hugo
./hugo
# yamllint enable rule:line-length
vars:
TZ: 'America/New_York'