diff --git a/resources/hydra-dispatcher/resources/hydra-dispatcher-deployment.yaml b/resources/hydra-dispatcher/resources/hydra-dispatcher-deployment.yaml index fc314ad..1bbdf80 100644 --- a/resources/hydra-dispatcher/resources/hydra-dispatcher-deployment.yaml +++ b/resources/hydra-dispatcher/resources/hydra-dispatcher-deployment.yaml @@ -18,7 +18,7 @@ spec: spec: containers: - name: hydra-dispatcher-php-fpm - image: reg.cadoles.com/cadoles/hydra-dispatcher-base:2023.12.15-develop.903.b675347 + image: reg.cadoles.com/cadoles/hydra-dispatcher-base:2024.4.2-develop.1411.74a9f16 args: ["/usr/sbin/php-fpm81", "-F", "-e"] readinessProbe: exec: @@ -48,22 +48,33 @@ spec: - mountPath: /app/config/hydra name: hydra-dispatcher-apps resources: {} - - - image: reg.cadoles.com/cadoles/hydra-dispatcher-base:2023.12.15-develop.903.b675347 + securityContext: + runAsNonRoot: true + runAsGroup: 1000 + runAsUser: 1000 + - image: reg.cadoles.com/cadoles/hydra-dispatcher-base:2024.4.2-develop.1411.74a9f16 imagePullPolicy: Always - name: hydra-dispatcher-nginx - args: ["/usr/sbin/nginx"] + name: hydra-dispatcher-caddy + args: + [ + "/usr/sbin/caddy", + "run", + "--adapter", + "caddyfile", + "--config", + "/etc/caddy/Caddyfile", + ] readinessProbe: httpGet: path: /health - port: 8080 + port: 80 initialDelaySeconds: 5 timeoutSeconds: 5 periodSeconds: 10 livenessProbe: httpGet: path: /health - port: 8080 + port: 80 initialDelaySeconds: 15 timeoutSeconds: 5 periodSeconds: 15 @@ -71,19 +82,23 @@ spec: - configMapRef: name: hydra-dispatcher-env env: - - name: NGINX_APP_UPSTREAM_BACKEND_SERVER + - name: CADDY_APP_UPSTREAM_BACKEND_SERVER value: 127.0.0.1:9000 - - name: NGINX_APP_ROOT - value: "/public/" - - name: NGINX_APP_PHP_INDEX - value: "/index.php" - - name: NGINX_ERROR_LOG_LEVEL - value: "warn" - - name: NGINX_APP_PHP_NON_FILE_PATTERN - value: "^/index\\.php(/|$)" + - name: CADDY_HTTPS_PORT + value: "8443" + - name: CADDY_HTTP_PORT + value: "80" + - name: CADDY_DATA_FS + value: "/tmp/caddy" + - name: CADDY_APP_ROOT_PUBLIC + value: "/app/public/" ports: - - containerPort: 8080 + - containerPort: 80 resources: {} + securityContext: + runAsNonRoot: true + runAsGroup: 1000 + runAsUser: 1000 restartPolicy: Always volumes: - name: hydra-dispatcher-apps diff --git a/resources/hydra-dispatcher/resources/hydra-dispatcher-service.yaml b/resources/hydra-dispatcher/resources/hydra-dispatcher-service.yaml index 4a209a3..1f8a023 100644 --- a/resources/hydra-dispatcher/resources/hydra-dispatcher-service.yaml +++ b/resources/hydra-dispatcher/resources/hydra-dispatcher-service.yaml @@ -7,7 +7,7 @@ metadata: spec: ports: - name: http - port: 8080 + port: 80 selector: app.kubernetes.io/name: hydra-dispatcher status: