From 287a3efa97f9eab007204584a8943b43ab9768c0 Mon Sep 17 00:00:00 2001 From: Gunjan Patel Date: Thu, 6 Jun 2019 00:28:25 -0500 Subject: [PATCH] fix the manifest --- examples/app-with-fix.yml | 34 ++++++++++++++++++++++++++++++++++ examples/app.yaml | 20 ++++++++++---------- 2 files changed, 44 insertions(+), 10 deletions(-) create mode 100644 examples/app-with-fix.yml diff --git a/examples/app-with-fix.yml b/examples/app-with-fix.yml new file mode 100644 index 0000000..dea2556 --- /dev/null +++ b/examples/app-with-fix.yml @@ -0,0 +1,34 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: goodmorning-deployment + labels: + app: goodmorning +spec: + replicas: 3 + selector: + matchLabels: + app: goodmorning + template: + metadata: + labels: + app: goodmorning + spec: + # hostNetwork: true + # hostPID: true + securityContext: + # runAsUser: 0 + fsGroup: 2000 + containers: + - name: goodmorning + image: gunjan5/goodmorning:v1.0 + securityContext: + # privileged: true + capabilities: + drop: + - all + # add: + # - NET_BIND_SERVICE + # - CAP_SYS_ADMIN + ports: + - containerPort: 8080 \ No newline at end of file diff --git a/examples/app.yaml b/examples/app.yaml index 083328d..c789417 100644 --- a/examples/app.yaml +++ b/examples/app.yaml @@ -14,21 +14,21 @@ spec: labels: app: goodmorning spec: - hostNetwork: true - hostPID: true + # hostNetwork: true + # hostPID: true securityContext: - runAsUser: 0 + # runAsUser: 0 fsGroup: 2000 containers: - name: goodmorning image: gunjan5/goodmorning:v1.0 securityContext: - privileged: true - capabilities: - drop: - - all - add: - - NET_BIND_SERVICE - - CAP_SYS_ADMIN + # privileged: true + # capabilities: + # drop: + # - all + # add: + # - NET_BIND_SERVICE + # - CAP_SYS_ADMIN ports: - containerPort: 8080 \ No newline at end of file