mirror of
https://gitea.fenix-dev.com/fenix-gitea-admin/iac-ansible-private.git
synced 2025-12-17 03:34:28 +00:00
a
This commit is contained in:
@ -23,8 +23,6 @@ spec:
|
|||||||
prometheus.io/scrape: "true"
|
prometheus.io/scrape: "true"
|
||||||
prometheus.io/port: "8080"
|
prometheus.io/port: "8080"
|
||||||
spec:
|
spec:
|
||||||
securityContext:
|
|
||||||
fsGroup: 1000
|
|
||||||
imagePullSecrets:
|
imagePullSecrets:
|
||||||
- name: regcred
|
- name: regcred
|
||||||
terminationGracePeriodSeconds: 10
|
terminationGracePeriodSeconds: 10
|
||||||
@ -36,6 +34,7 @@ spec:
|
|||||||
- "-ec"
|
- "-ec"
|
||||||
- |
|
- |
|
||||||
id stolon
|
id stolon
|
||||||
|
id root
|
||||||
# Generate our keeper uid using the pod index
|
# Generate our keeper uid using the pod index
|
||||||
IFS='-' read -ra ADDR <<< "$(hostname)"
|
IFS='-' read -ra ADDR <<< "$(hostname)"
|
||||||
export STKEEPER_UID="keeper${ADDR[-1]}"
|
export STKEEPER_UID="keeper${ADDR[-1]}"
|
||||||
@ -43,9 +42,13 @@ spec:
|
|||||||
export STKEEPER_PG_LISTEN_ADDRESS=$POD_IP
|
export STKEEPER_PG_LISTEN_ADDRESS=$POD_IP
|
||||||
mkdir -p /stolon-data/data
|
mkdir -p /stolon-data/data
|
||||||
export STOLON_DATA=/stolon-data/data
|
export STOLON_DATA=/stolon-data/data
|
||||||
chown stolon:stolon /stolon-data
|
chown root:root /stolon-data
|
||||||
chown stolon:stolon $STOLON_DATA
|
chown root:root $STOLON_DATA
|
||||||
exec gosu stolon stolon-keeper --data-dir $STOLON_DATA
|
exec gosu root stolon-keeper --data-dir $STOLON_DATA
|
||||||
|
securityContext:
|
||||||
|
runAsUser: 0
|
||||||
|
runAsGroup: 0
|
||||||
|
allowPrivilegeEscalation: true
|
||||||
env:
|
env:
|
||||||
- name: POD_NAME
|
- name: POD_NAME
|
||||||
valueFrom:
|
valueFrom:
|
||||||
|
|||||||
Reference in New Issue
Block a user