fix: values helm

lpsm-dev · Feb 23, 2023 · 120f3ee · 120f3ee
1 parent e1a2a2e
commit 120f3ee
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 13 deletions.
diff --git a/infra/kubernetes/helm/README.md b/infra/kubernetes/helm/README.md
@@ -27,19 +27,20 @@ A Helm chart for XMRig Monero Miner
 | autoscaling.targetCPUUtilizationPercentage | int | `80` |  |
 | fullnameOverride | string | `""` |  |
 | image.pullPolicy | string | `"IfNotPresent"` |  |
-| image.repository | string | `"ghcr.io/ci-monk/docker-xmrig-miner"` |  |
+| image.repository | string | `"xmrig"` |  |
 | image.tag | string | `"main"` |  |
 | imagePullSecrets | list | `[]` |  |
 | nameOverride | string | `""` |  |
 | nodeSelector | object | `{}` |  |
 | podAnnotations | object | `{}` |  |
 | podSecurityContext | object | `{}` |  |
 | replicaCount | int | `3` |  |
-| resources.limits.cpu | string | `"2000m"` |  |
-| resources.limits.memory | string | `"2Gi"` |  |
-| resources.requests.cpu | string | `"100m"` |  |
-| resources.requests.memory | string | `"1Gi"` |  |
-| securityContext | object | `{}` |  |
+| resources.limits.cpu | string | `"100m"` |  |
+| resources.limits.memory | string | `"252Mi"` |  |
+| resources.requests.cpu | string | `"10m"` |  |
+| resources.requests.memory | string | `"128Mi"` |  |
+| securityContext.allowPrivilegeEscalation | bool | `false` |  |
+| securityContext.readOnlyRootFilesystem | bool | `true` |  |
 | tolerations | list | `[]` |  |
 
 ----------------------------------------------

diff --git a/infra/kubernetes/helm/values.yaml b/infra/kubernetes/helm/values.yaml
@@ -19,13 +19,9 @@ podAnnotations: {}
 podSecurityContext: {}
   # fsGroup: 2000
 
-securityContext: {}
-  # capabilities:
-  #   drop:
-  #   - ALL
-  # readOnlyRootFilesystem: true
-  # runAsNonRoot: true
-  # runAsUser: 1000
+securityContext:
+  readOnlyRootFilesystem: true
+  allowPrivilegeEscalation: false
 
 resources:
   # We usually recommend not to specify default resources and to leave this as a conscious