cluster

commit 4bf224fc8e351633ef829119cf4cdcc2b8cb4edb
parent 1cc124419c9f562afbcefa63e88a2e55ac1d1890
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sun, 13 Apr 2025 16:04:52 +0200

Fix securityContext

Diffstat:
M
apps/base/irc/resources.yaml
 | 
98
++++++++++++++++++++++++++++++++++++++++----------------------------------------

1 file changed, 49 insertions(+), 49 deletions(-)
diff --git a/apps/base/irc/resources.yaml b/apps/base/irc/resources.yaml
@@ -18,10 +18,6 @@ metadata:
     labels:
         app: atheme
 spec:
-    securityContext:
-        runAsUser: 10000
-        runAsGroup: 10000
-        fsGroup: 10000
     replicas: 1
     strategy:
         type: RollingUpdate
@@ -33,45 +29,49 @@ spec:
             labels:
                 app: atheme
         spec:
+            securityContext:
+                runAsUser: 10000
+                runAsGroup: 10000
+                fsGroup: 10000
             initContainers:
                 - name: fix-permissions
                   image: alpine:latest
                   command:
-                      - chown
-                      - -R
-                      - 10000:10000
-                      - /atheme/etc
+                    - chown
+                    - -R
+                    - 10000:10000
+                    - /atheme/etc
                   volumeMounts:
-                      - name: atheme-pvc
-                        mountPath: /atheme/etc
+                    - name: atheme-pvc
+                      mountPath: /atheme/etc
             containers:
                 - name: atheme
                   image: ghcr.io/mtrnord/atheme:contrib
                   imagePullPolicy: Always
                   volumeMounts:
-                      - mountPath: /atheme/etc/atheme.conf
-                        name: atheme-secrets
-                        subPath: atheme.conf
-                        readOnly: true
-                      - mountPath: /atheme/etc/atheme.motd
-                        name: atheme-secrets
-                        subPath: atheme.motd
-                        readOnly: true
-                      - mountPath: /etc/msmtprc
-                        name: atheme-secrets
-                        subPath: msmtprc
-                        readOnly: true
-                      - mountPath: /atheme/etc
-                        name: atheme-pvc
+                    - mountPath: /atheme/etc/atheme.conf
+                      name: atheme-secrets
+                      subPath: atheme.conf
+                      readOnly: true
+                    - mountPath: /atheme/etc/atheme.motd
+                      name: atheme-secrets
+                      subPath: atheme.motd
+                      readOnly: true
+                    - mountPath: /etc/msmtprc
+                      name: atheme-secrets
+                      subPath: msmtprc
+                      readOnly: true
+                    - mountPath: /atheme/etc
+                      name: atheme-pvc
                   securityContext:
-                      allowPrivilegeEscalation: false
+                    allowPrivilegeEscalation: false
             volumes:
                 - name: atheme-secrets
                   secret:
-                      secretName: atheme-secrets
+                    secretName: atheme-secrets
                 - name: atheme-pvc
                   persistentVolumeClaim:
-                      claimName: atheme-db
+                    claimName: atheme-db
 ---
 apiVersion: v1
 kind: Service
@@ -106,32 +106,32 @@ spec:
                   image: ghcr.io/mtrnord/solanum:latest
                   imagePullPolicy: Always
                   ports:
-                      - containerPort: 6697
-                        name: ircs
-                        protocol: TCP
-                      - containerPort: 6667
-                        name: irc
-                        protocol: TCP
-                      - containerPort: 6666
-                        name: atheme
-                        protocol: TCP
+                    - containerPort: 6697
+                      name: ircs
+                      protocol: TCP
+                    - containerPort: 6667
+                      name: irc
+                      protocol: TCP
+                    - containerPort: 6666
+                      name: atheme
+                      protocol: TCP
                   volumeMounts:
-                      - mountPath: /ircd/etc/ircd.conf
-                        name: solanum-config
-                        subPath: ircd.conf
-                        readOnly: true
-                      - mountPath: /ircd/certs
-                        name: irc-certs
-                        readOnly: true
-                      - mountPath: /usr/local/logs
-                        name: logs
+                    - mountPath: /ircd/etc/ircd.conf
+                      name: solanum-config
+                      subPath: ircd.conf
+                      readOnly: true
+                    - mountPath: /ircd/certs
+                      name: irc-certs
+                      readOnly: true
+                    - mountPath: /usr/local/logs
+                      name: logs
             volumes:
                 - name: solanum-config
                   secret:
-                      secretName: solanum-config
+                    secretName: solanum-config
                 - name: irc-certs
                   secret:
-                      secretName: irc-certs
+                    secretName: irc-certs
                 - name: logs
                   emptyDir: {}
 ---
@@ -170,8 +170,8 @@ spec:
           sectionName: ircs
     rules:
         - backendRefs:
-              - name: solanum
-                port: 6697
+            - name: solanum
+              port: 6697
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim