aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes/aai/components/aai-traversal/templates/job.yaml
diff options
context:
space:
mode:
authorFiete Ostkamp <Fiete.Ostkamp@telekom.de>2025-02-13 11:47:31 +0100
committerFiete Ostkamp <Fiete.Ostkamp@telekom.de>2025-02-17 09:39:26 +0100
commitbf91cb89f3691328a634c42f30593cb6674a5761 (patch)
treef991d91b273be5ca06fa67e55ac8016200ce50a3 /kubernetes/aai/components/aai-traversal/templates/job.yaml
parentd2b2fd0afd97799ae0340420afae3279cd680bb0 (diff)
[AAI] 15.0.2 release
- [resources,traversal,graphadmin] use 1.15.4 image version - [resources,traversal,graphadmin] fix liveness probe - [all] make annotations configurable - [all] disable janusgraph warning log line on each liveness probe - [all] disable tracing by default since jaeger is not included in the deployment by default - [all] use 6.1.0 readiness image with shorter check intervals - [graphadmin] wait for cassandra before running the schema-creation init container Issue-ID: AAI-4124 Change-Id: Ib1d592c1fc1e3cfb3fe26b238ec2ad6c200ef2e1 Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
Diffstat (limited to 'kubernetes/aai/components/aai-traversal/templates/job.yaml')
-rw-r--r--kubernetes/aai/components/aai-traversal/templates/job.yaml27
1 files changed, 13 insertions, 14 deletions
diff --git a/kubernetes/aai/components/aai-traversal/templates/job.yaml b/kubernetes/aai/components/aai-traversal/templates/job.yaml
index 3ea973fb99..372ea2da07 100644
--- a/kubernetes/aai/components/aai-traversal/templates/job.yaml
+++ b/kubernetes/aai/components/aai-traversal/templates/job.yaml
@@ -26,10 +26,9 @@ metadata:
namespace: {{ include "common.namespace" . }}
labels: {{- include "common.labels" . | nindent 4 }}
{{ if .Values.global.jobs.migration.enabled }}
- annotations:
- "helm.sh/hook": post-upgrade,post-rollback,post-install
- "helm.sh/hook-weight": "2"
- "helm.sh/hook-delete-policy": before-hook-creation
+ {{- if .Values.jobAnnotations }}
+ annotations: {{- include "common.tplValue" (dict "value" .Values.jobAnnotations "context" $) | nindent 4 }}
+ {{- end }}
{{ end }}
spec:
template:
@@ -43,6 +42,16 @@ spec:
- name: {{ include "common.name" . }}-wait-for-aai-haproxy
image: {{ include "repositoryGenerator.image.readiness" . }}
imagePullPolicy: {{ .Values.global.pullPolicy | default .Values.pullPolicy }}
+ securityContext:
+ runAsUser: 100
+ runAsGroup: 65533
+ readOnlyRootFilesystem: true
+ privileged: false
+ allowPrivilegeEscalation: false
+ capabilities:
+ drop:
+ - ALL
+ - CAP_NET_RAW
command:
- sh
- "-c"
@@ -60,16 +69,6 @@ spec:
requests:
cpu: "3m"
memory: "20Mi"
- securityContext:
- runAsUser: 100
- runAsGroup: 65533
- readOnlyRootFilesystem: true
- privileged: false
- allowPrivilegeEscalation: false
- capabilities:
- drop:
- - ALL
- - CAP_NET_RAW
containers:
- name: {{ include "common.name" . }}-job
image: {{ include "repositoryGenerator.repository" . }}/{{ .Values.image }}