resources/deployment.yaml

@@ -18,25 +18,20 @@ spec:
       - name: varnish
         image: reg.cadoles.com/dh/library/varnish:7.6.1-alpine
         imagePullPolicy: IfNotPresent
-        env:
-        - name: VARNISH_HTTP_PORT
-          value: "8080"
         envFrom:
         - configMapRef:
             name: varnish-env
+        env:
+        - VARNISH_HTTP_PORT=8080
         ports:
         - containerPort: 8080
         volumeMounts:
         - mountPath: /etc/varnish/default.vcl
           name: varnish-config
           subPath: default.vcl
-        - mountPath: /var/lib/varnish/varnishd
-          name: varnish-lib
         securityContext:
           readOnlyRootFilesystem: true
           allowPrivilegeEscalation: false
-          capabilities:
-            add: [ "IPC_LOCK" ]
       volumes:
       - name: varnish-config
         configMap:
@@ -44,9 +39,6 @@ spec:
           items:
           - key: default.vcl
             path: default.vcl
-      - name: varnish-lib
-        emptyDir:
-          sizeLimit: 1Gi
       securityContext:
         runAsUser: 1000
         runAsGroup: 1000

resources/svc.yaml

@@ -6,7 +6,6 @@ spec:
   selector:
     app: varnish
   ports:
-  - name: varnish-http
-    protocol: TCP
+  - protocol: TCP
     port: 8080
     targetPort: 8080