cluster

commit c14f7d966fe9133489dc576dcbb311cde4bce6f8
parent f54c94bd63ffb5afb8f7afc6edcedf2be90dd4f4
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Wed, 18 Feb 2026 21:01:58 +0100

fix connectivity-tester

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
apps/talos_cluster/connectivity-tester/deployment.yaml
 | 
18
+++++++++++++++---

1 file changed, 15 insertions(+), 3 deletions(-)
diff --git a/apps/talos_cluster/connectivity-tester/deployment.yaml b/apps/talos_cluster/connectivity-tester/deployment.yaml
@@ -39,12 +39,15 @@ spec:
                 command:
                   - sleep
                   - "10"
+          # NOTE: nginx:1.27-alpine runs master as root; remove runAsNonRoot/runAsUser
+          # when switching to deno image (USER deno = UID 1000), add:
+          #   runAsNonRoot: true
+          #   runAsUser: 1000
+          #   runAsGroup: 1000
+          # and change containerPort to 8000.
           securityContext:
             allowPrivilegeEscalation: false
             readOnlyRootFilesystem: true
-            runAsNonRoot: true
-            runAsUser: 1000
-            runAsGroup: 1000
             capabilities:
               drop:
                 - ALL
@@ -68,6 +71,11 @@ spec:
               readOnly: true
             - mountPath: /tmp
               name: tmp
+            # nginx needs these writable; deno only needs /tmp
+            - mountPath: /var/cache/nginx
+              name: var-cache-nginx
+            - mountPath: /var/run
+              name: var-run
           livenessProbe:
             httpGet:
               path: /
@@ -89,6 +97,10 @@ spec:
         - name: tmp
           emptyDir:
             sizeLimit: 2048Mi
+        - name: var-cache-nginx
+          emptyDir: {}
+        - name: var-run
+          emptyDir: {}
 ---
 apiVersion: apps/v1
 kind: Deployment