port fixes to preprod after testing in dev (#226)

retaildevcrews · May 11, 2022 · 6cae0a4 · 6cae0a4
1 parent b76b4ad
commit 6cae0a4
Showing 1 changed file with 26 additions and 0 deletions.
diff --git a/autogitops/preprod/loderunner.yaml b/autogitops/preprod/loderunner.yaml
@@ -21,6 +21,14 @@ spec:
         - name: app
           image: {{gitops.lrImage}}
           imagePullPolicy: Always
+          securityContext:
+            readOnlyRootFilesystem: true
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop:
+                - ALL
+            runAsNonRoot: true
+            runAsUser: 10001
           ports:
             - name: http
               containerPort: 8080
@@ -32,6 +40,14 @@ spec:
             requests:
               memory: "512Mi"
               cpu: "500m"
+          livenessProbe:
+            httpGet:
+              path: /version
+              port: http
+          readinessProbe:
+            httpGet:
+              path: /version
+              port: http
           args:
           - -l
           - "1000"
@@ -43,6 +59,16 @@ spec:
           - -f
           - benchmark.json
           - -p
+          volumeMounts:
+            - mountPath: /tmp
+              name: tmp
+      automountServiceAccountToken: false
+      securityContext:
+        seccompProfile:
+          type: RuntimeDefault
+      volumes:
+      - emptyDir: {}
+        name: tmp
 ---
 
 apiVersion: v1