Skip to content
Snippets Groups Projects
Verified Commit 4498c4a0 authored by Sheogorath's avatar Sheogorath :european_castle:
Browse files

fix(tor): Adjust deployment to be functional

parent c162275e
No related branches found
No related tags found
No related merge requests found
...@@ -4,6 +4,7 @@ metadata: ...@@ -4,6 +4,7 @@ metadata:
labels: labels:
app.kubernetes.io/name: tor app.kubernetes.io/name: tor
name: tor name: tor
namespace: tor
spec: spec:
replicas: 2 replicas: 2
selector: selector:
...@@ -14,6 +15,10 @@ spec: ...@@ -14,6 +15,10 @@ spec:
labels: labels:
app.kubernetes.io/name: tor app.kubernetes.io/name: tor
spec: spec:
securityContext:
runAsUser: 101
runAsGroup: 101
fsGroup: 101
topologySpreadConstraints: topologySpreadConstraints:
- maxSkew: 1 - maxSkew: 1
topologyKey: kubernetes.io/hostname topologyKey: kubernetes.io/hostname
...@@ -43,9 +48,20 @@ spec: ...@@ -43,9 +48,20 @@ spec:
cpu: "1" cpu: "1"
memory: 512Mi memory: 512Mi
securityContext: securityContext:
runAsUser: 101
runAsGroup: 101
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
runAsNonRoot: true runAsNonRoot: true
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
seccompProfile:
type: RuntimeDefault
volumeMounts:
- name: home
mountPath: /var/lib/tor/
volumes:
- name: home
emptyDir:
medium: Memory
sizeLimit: 128Mi
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment