Skip to content
Snippets Groups Projects
Commit 0c75cc6d authored by Manuel Esberger's avatar Manuel Esberger
Browse files

small update on upload and ldap

parent e3fc2099
Branches
No related tags found
No related merge requests found
apiVersion: batch/v1
kind: Job
metadata:
name: init-permissions
spec:
template:
spec:
containers:
- name: init-permissions
image: busybox
command:
- /bin/bash
- -ec
- |
chown -R {{ .Values.uploadservice.securityContext.runAsUser }}:{{ .Values.uploadservice.securityContext.fsGroup }} /srv/tusd-data
volumeMounts:
- name: tusd-data
mountPath: /srv/tusd-data
resources: {{- toYaml .Values.resources | nindent 10 }}
securityContext:
runAsNonRoot: true
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
seccompProfile:
type: {{ .Values.uploadservice.securityContext.seccompProfile.type | default "RuntimeDefault" }}
volumes:
- name: tusd-data
persistentVolumeClaim:
claimName: tusd-data-pvc
restartPolicy: Never
\ No newline at end of file
...@@ -800,6 +800,10 @@ identityservice: ...@@ -800,6 +800,10 @@ identityservice:
readOnlyRootFilesystem: true readOnlyRootFilesystem: true
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
runAsUser: null #todo: does not overwrite runAsUser: null #todo: does not overwrite
ltb-passwd:
enabled: false
ingress:
enabled: false
global: global:
## @param identityservice.global.ldapDomain The LDAP domain name in domain "dbrepo.at" form or explicit in "dc=dbrepo,dc=at" form. ## @param identityservice.global.ldapDomain The LDAP domain name in domain "dbrepo.at" form or explicit in "dc=dbrepo,dc=at" form.
ldapDomain: dc=dbrepo,dc=at ldapDomain: dc=dbrepo,dc=at
...@@ -816,9 +820,7 @@ identityservice: ...@@ -816,9 +820,7 @@ identityservice:
## @param identityservice.group The group that contains the administrators for the broker service. ## @param identityservice.group The group that contains the administrators for the broker service.
group: system group: system
## @skip identityservice.ltb-passwd ## @skip identityservice.ltb-passwd
ltb-passwd:
ingress:
enabled: false
## @skip identityservice.phpldapadmin ## @skip identityservice.phpldapadmin
phpldapadmin: phpldapadmin:
enabled: false enabled: false
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment