Skip to content
This repository has been archived by the owner on Jul 1, 2023. It is now read-only.

Commit

Permalink
Switch from a pod to a deployment.
Browse files Browse the repository at this point in the history
Gravity 7 has new pod security policies that can be incorrectly applied
to previously working user applications as discussed at
gravitational/gravity#2105.

Thus we need to specify a security context for the alpine pod.  However,
helm upgrade (but not install) fails when a explicit security context is
set on a pod.  The recommended way to migrate this is a deployment --
which will successfully install or upgrade with securityContext set.
  • Loading branch information
wadells committed Mar 3, 2021
1 parent c3260c6 commit e7c376f
Show file tree
Hide file tree
Showing 12 changed files with 100 additions and 40 deletions.
2 changes: 1 addition & 1 deletion gravity101/v1-with-resources/charts/alpine/Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
name: alpine
description: Deploy a basic Alpine 3.3 Linux pod
description: An Alpine 3.3 Linux deployment
version: 0.0.1
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: alpine
labels:
app: alpine
spec:
replicas: 1
selector:
matchLabels:
app: alpine
strategy:
type: Recreate
template:
metadata:
labels:
app: alpine
spec:
containers:
- name: alpine
image: "{{ .Values.registry }}alpine:{{ .Values.version }}"
command: ["/bin/sleep", "90000"]
securityContext:
runAsNonRoot: false
9 changes: 0 additions & 9 deletions gravity101/v1-with-resources/charts/alpine/templates/pod.yaml

This file was deleted.

2 changes: 1 addition & 1 deletion gravity101/v1/charts/alpine/Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
name: alpine
description: Deploy a basic Alpine 3.3 Linux pod
description: An Alpine 3.3 Linux deployment
version: 0.0.1
24 changes: 24 additions & 0 deletions gravity101/v1/charts/alpine/templates/deployment.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: alpine
labels:
app: alpine
spec:
replicas: 1
selector:
matchLabels:
app: alpine
strategy:
type: Recreate
template:
metadata:
labels:
app: alpine
spec:
containers:
- name: alpine
image: "{{ .Values.registry }}alpine:{{ .Values.version }}"
command: ["/bin/sleep", "90000"]
securityContext:
runAsNonRoot: false
9 changes: 0 additions & 9 deletions gravity101/v1/charts/alpine/templates/pod.yaml

This file was deleted.

2 changes: 1 addition & 1 deletion gravity101/v2/charts/alpine/Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
name: alpine
description: Deploy a basic Alpine 3.4 Linux pod
description: An Alpine 3.4 Linux deployment
version: 0.0.2
24 changes: 24 additions & 0 deletions gravity101/v2/charts/alpine/templates/deployment.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: alpine
labels:
app: alpine
spec:
replicas: 1
selector:
matchLabels:
app: alpine
strategy:
type: Recreate
template:
metadata:
labels:
app: alpine
spec:
containers:
- name: alpine
image: "{{ .Values.registry }}alpine:{{ .Values.version }}"
command: ["/bin/sleep", "90000"]
securityContext:
runAsNonRoot: false
9 changes: 0 additions & 9 deletions gravity101/v2/charts/alpine/templates/pod.yaml

This file was deleted.

2 changes: 1 addition & 1 deletion gravity101/v3/charts/alpine/Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
name: alpine
description: Deploy a basic Alpine 3.5 Linux pod
description: An Alpine 3.5 Linux deployment
version: 0.0.3
24 changes: 24 additions & 0 deletions gravity101/v3/charts/alpine/templates/deployment.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
apiVersion: apps/v1
kind: Deployment
metadata:
name: alpine
labels:
app: alpine
spec:
replicas: 1
selector:
matchLabels:
app: alpine
strategy:
type: Recreate
template:
metadata:
labels:
app: alpine
spec:
containers:
- name: alpine
image: "{{ .Values.registry }}alpine:{{ .Values.version }}"
command: ["/bin/sleep", "90000"]
securityContext:
runAsNonRoot: false
9 changes: 0 additions & 9 deletions gravity101/v3/charts/alpine/templates/pod.yaml

This file was deleted.

0 comments on commit e7c376f

Please sign in to comment.