This repository has been archived by the owner on Jul 1, 2023. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 233
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Gravity 7 has new pod security policies that can be incorrectly applied to previously working user applications as discussed at gravitational/gravity#2105. Thus we need to specify a security context for the alpine pod. However, helm upgrade (but not install) fails when a explicit security context is set on a pod. The recommended way to migrate this is a deployment -- which will successfully install or upgrade with securityContext set.
- Loading branch information
Showing
12 changed files
with
100 additions
and
40 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,3 +1,3 @@ | ||
name: alpine | ||
description: Deploy a basic Alpine 3.3 Linux pod | ||
description: An Alpine 3.3 Linux deployment | ||
version: 0.0.1 |
24 changes: 24 additions & 0 deletions
24
gravity101/v1-with-resources/charts/alpine/templates/deployment.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,24 @@ | ||
apiVersion: apps/v1 | ||
kind: Deployment | ||
metadata: | ||
name: alpine | ||
labels: | ||
app: alpine | ||
spec: | ||
replicas: 1 | ||
selector: | ||
matchLabels: | ||
app: alpine | ||
strategy: | ||
type: Recreate | ||
template: | ||
metadata: | ||
labels: | ||
app: alpine | ||
spec: | ||
containers: | ||
- name: alpine | ||
image: "{{ .Values.registry }}alpine:{{ .Values.version }}" | ||
command: ["/bin/sleep", "90000"] | ||
securityContext: | ||
runAsNonRoot: false |
9 changes: 0 additions & 9 deletions
9
gravity101/v1-with-resources/charts/alpine/templates/pod.yaml
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,3 +1,3 @@ | ||
name: alpine | ||
description: Deploy a basic Alpine 3.3 Linux pod | ||
description: An Alpine 3.3 Linux deployment | ||
version: 0.0.1 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,24 @@ | ||
apiVersion: apps/v1 | ||
kind: Deployment | ||
metadata: | ||
name: alpine | ||
labels: | ||
app: alpine | ||
spec: | ||
replicas: 1 | ||
selector: | ||
matchLabels: | ||
app: alpine | ||
strategy: | ||
type: Recreate | ||
template: | ||
metadata: | ||
labels: | ||
app: alpine | ||
spec: | ||
containers: | ||
- name: alpine | ||
image: "{{ .Values.registry }}alpine:{{ .Values.version }}" | ||
command: ["/bin/sleep", "90000"] | ||
securityContext: | ||
runAsNonRoot: false |
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,3 +1,3 @@ | ||
name: alpine | ||
description: Deploy a basic Alpine 3.4 Linux pod | ||
description: An Alpine 3.4 Linux deployment | ||
version: 0.0.2 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,24 @@ | ||
apiVersion: apps/v1 | ||
kind: Deployment | ||
metadata: | ||
name: alpine | ||
labels: | ||
app: alpine | ||
spec: | ||
replicas: 1 | ||
selector: | ||
matchLabels: | ||
app: alpine | ||
strategy: | ||
type: Recreate | ||
template: | ||
metadata: | ||
labels: | ||
app: alpine | ||
spec: | ||
containers: | ||
- name: alpine | ||
image: "{{ .Values.registry }}alpine:{{ .Values.version }}" | ||
command: ["/bin/sleep", "90000"] | ||
securityContext: | ||
runAsNonRoot: false |
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,3 +1,3 @@ | ||
name: alpine | ||
description: Deploy a basic Alpine 3.5 Linux pod | ||
description: An Alpine 3.5 Linux deployment | ||
version: 0.0.3 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,24 @@ | ||
apiVersion: apps/v1 | ||
kind: Deployment | ||
metadata: | ||
name: alpine | ||
labels: | ||
app: alpine | ||
spec: | ||
replicas: 1 | ||
selector: | ||
matchLabels: | ||
app: alpine | ||
strategy: | ||
type: Recreate | ||
template: | ||
metadata: | ||
labels: | ||
app: alpine | ||
spec: | ||
containers: | ||
- name: alpine | ||
image: "{{ .Values.registry }}alpine:{{ .Values.version }}" | ||
command: ["/bin/sleep", "90000"] | ||
securityContext: | ||
runAsNonRoot: false |
This file was deleted.
Oops, something went wrong.