aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes
diff options
context:
space:
mode:
authorAndreas Geissler <andreas-geissler@telekom.de>2025-01-15 16:20:03 +0100
committerAndreas Geissler <andreas-geissler@telekom.de>2025-01-15 16:20:03 +0100
commit4885be4c0fde704fd1c56df408871be0647b6e4f (patch)
treed61b238640eb1e87b57fb334a951954171a21a3e /kubernetes
parent92c9db226ca384d2e179b75ebbc0c2e88d52048e (diff)
[COMMON] Fix errors in mariadb operator templateHEADmaster
- remove SecurytyContext settings - remove fixed primary pod index from template Issue-ID: OOM-3324 Change-Id: I535477ec43cde42cc63f1ab2620cf632eb64c943 Signed-off-by: Andreas Geissler <andreas-geissler@telekom.de>
Diffstat (limited to 'kubernetes')
-rw-r--r--kubernetes/common/common/Chart.yaml2
-rw-r--r--kubernetes/common/common/templates/_mariadb.tpl6
2 files changed, 2 insertions, 6 deletions
diff --git a/kubernetes/common/common/Chart.yaml b/kubernetes/common/common/Chart.yaml
index 591f24f4ee..6fce57f83b 100644
--- a/kubernetes/common/common/Chart.yaml
+++ b/kubernetes/common/common/Chart.yaml
@@ -17,4 +17,4 @@
apiVersion: v2
description: Common templates for inclusion in other charts
name: common
-version: 13.2.10
+version: 13.2.11
diff --git a/kubernetes/common/common/templates/_mariadb.tpl b/kubernetes/common/common/templates/_mariadb.tpl
index 0e46e5ef26..c1447cd0ac 100644
--- a/kubernetes/common/common/templates/_mariadb.tpl
+++ b/kubernetes/common/common/templates/_mariadb.tpl
@@ -312,6 +312,7 @@ spec:
authDelegatorRoleName: {{ $dbinst }}-auth
gracefulShutdownTimeout: 5s
securityContext:
+ readOnlyFileSystem: true
allowPrivilegeEscalation: false
capabilities:
drop:
@@ -320,11 +321,8 @@ spec:
privileged: false
runAsNonRoot: true
runAsUser: 10001
- seccompProfile:
- type: RuntimeDefault
primary:
automaticFailover: true
- podIndex: 0
recovery:
enabled: true
clusterHealthyTimeout: 30s
@@ -344,8 +342,6 @@ spec:
privileged: false
runAsNonRoot: true
runAsUser: 10001
- seccompProfile:
- type: RuntimeDefault
config:
reuseStorageVolume: false
volumeClaimTemplate: