test

components/hydra-oidc/resources/hydra-oidc-deployment.yaml

@@ -46,10 +46,10 @@ spec:
             - configMapRef:
                 name: hydra-oidc-env
           resources: {}
-          securityContext:
+          # securityContext:
-            runAsNonRoot: true
+          #   runAsNonRoot: true
-            runAsGroup: 1000
+          #   runAsGroup: 1000
-            runAsUser: 1000
+          #   runAsUser: 1000
 
         - image: reg.cadoles.com/cmsassot/hydra-oidc-test:latest
           imagePullPolicy: Always
@@ -94,8 +94,8 @@ spec:
             - name: CADDY_APP_ROOT_PUBLIC
               value: "/app/public/"
           resources: {}
-          securityContext:
+          # securityContext:
-            runAsNonRoot: true
+          #   runAsNonRoot: true
-            runAsGroup: 1000
+          #   runAsGroup: 1000
-            runAsUser: 1000
+          #   runAsUser: 1000
       restartPolicy: Always

components/hydra-sql/resources/hydra-sql-deployment.yaml

@@ -36,10 +36,10 @@ spec:
             initialDelaySeconds: 10
             periodSeconds: 30
           resources: {}
-          securityContext:
+          # securityContext:
-            runAsNonRoot: true
+          #   runAsNonRoot: true
-            runAsGroup: 1000
+          #   runAsGroup: 1000
-            runAsUser: 1000
+          #   runAsUser: 1000
           envFrom:
             - configMapRef:
                 name: hydra-sql-env
@@ -98,10 +98,10 @@ spec:
             - name: CADDY_APP_ROOT_PUBLIC
               value: "/app/public/"
           resources: {}
-          securityContext:
+          # securityContext:
-            runAsNonRoot: true
+          #   runAsNonRoot: true
-            runAsGroup: 1000
+          #   runAsGroup: 1000
-            runAsUser: 1000
+          #   runAsUser: 1000
           ports:
             - containerPort: 8080
           volumeMounts:

resources/hydra-dispatcher/resources/hydra-dispatcher-deployment.yaml

@@ -48,10 +48,10 @@ spec:
         - mountPath: /app/config/hydra
           name: hydra-dispatcher-apps
         resources: {}
-        securityContext:
+        # securityContext:
-          runAsNonRoot: true
+        #   runAsNonRoot: true
-          runAsGroup: 1000
+        #   runAsGroup: 1000
-          runAsUser: 1000
+        #   runAsUser: 1000
       - image: reg.cadoles.com/cmsassot/hydra-dispatcher-test:latest
         imagePullPolicy: Always
         name: hydra-dispatcher-nginx
@@ -95,12 +95,24 @@ spec:
         ports:
         - containerPort: 8080
         resources: {}
-        securityContext:
+        volumeMounts:
-          runAsNonRoot: true
+          - name: caddy-data
-          runAsGroup: 1000
+            mountPath: /tmp/caddy
-          runAsUser: 1000
+          - name: caddy-var
+            mountPath: /var/caddy
+        # securityContext:
+        #   runAsNonRoot: true
+        #   runAsGroup: 1000
+        #   runAsUser: 1000
       restartPolicy: Always
       volumes:
       - name: hydra-dispatcher-apps
         configMap:
           name: hydra-dispatcher-apps
+      - name: caddy-data
+        emptyDir:
+          sizeLimit: 128Mi
+      - name: caddy-var
+        emptyDir:
+          sizeLimit: 256Mi
+