mirror of
https://github.com/wahyd4/home-argocd.git
synced 2026-08-09 05:06:20 +10:00
Update
This commit is contained in:
@@ -636,24 +636,11 @@ spec:
|
||||
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
|
||||
##
|
||||
affinity: {}
|
||||
# nodeAffinity:
|
||||
# requiredDuringSchedulingIgnoredDuringExecution:
|
||||
# nodeSelectorTerms:
|
||||
# - matchExpressions:
|
||||
# - key: kubernetes.io/e2e-az-name
|
||||
# operator: In
|
||||
# values:
|
||||
# - e2e-az1
|
||||
# - e2e-az2
|
||||
|
||||
## If specified, the pod's tolerations.
|
||||
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
||||
##
|
||||
tolerations: []
|
||||
# - key: "key"
|
||||
# operator: "Equal"
|
||||
# value: "value"
|
||||
# effect: "NoSchedule"
|
||||
|
||||
## If specified, the pod's topology spread constraints.
|
||||
## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
|
||||
@@ -671,10 +658,10 @@ spec:
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
|
||||
##
|
||||
securityContext:
|
||||
runAsGroup: 2000
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
fsGroup: 2000
|
||||
fsGroup: 1000
|
||||
|
||||
## ListenLocal makes the Alertmanager server listen on loopback, so that it does not bind against the Pod IP.
|
||||
## Note this is only for the Alertmanager UI, not the gossip communication.
|
||||
@@ -1661,9 +1648,9 @@ spec:
|
||||
## ref: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/
|
||||
##
|
||||
securityContext:
|
||||
runAsGroup: 2000
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 2000
|
||||
runAsUser: 1000
|
||||
|
||||
# Security context for create job container
|
||||
createSecretJob:
|
||||
@@ -1871,24 +1858,11 @@ spec:
|
||||
## ref: https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/
|
||||
##
|
||||
tolerations: []
|
||||
# - key: "key"
|
||||
# operator: "Equal"
|
||||
# value: "value"
|
||||
# effect: "NoSchedule"
|
||||
|
||||
## Assign custom affinity rules to the prometheus operator
|
||||
## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/
|
||||
##
|
||||
affinity: {}
|
||||
# nodeAffinity:
|
||||
# requiredDuringSchedulingIgnoredDuringExecution:
|
||||
# nodeSelectorTerms:
|
||||
# - matchExpressions:
|
||||
# - key: kubernetes.io/e2e-az-name
|
||||
# operator: In
|
||||
# values:
|
||||
# - e2e-az1
|
||||
# - e2e-az2
|
||||
dnsConfig: {}
|
||||
# nameservers:
|
||||
# - 1.2.3.4
|
||||
@@ -2307,17 +2281,17 @@ spec:
|
||||
##
|
||||
tolerations:
|
||||
- key: "node"
|
||||
operator: "Equal"
|
||||
value: "special"
|
||||
effect: "NoSchedule"
|
||||
- key: node-role.kubernetes.io/master
|
||||
operator: Equal
|
||||
value: ""
|
||||
effect: NoSchedule
|
||||
- key: node-role.kubernetes.io/control-plane
|
||||
operator: Equal
|
||||
value: ""
|
||||
effect: NoSchedule
|
||||
operator: "Equal"
|
||||
value: "special"
|
||||
effect: "NoSchedule"
|
||||
- key: node-role.kubernetes.io/master
|
||||
operator: Equal
|
||||
value: ""
|
||||
effect: NoSchedule
|
||||
- key: node-role.kubernetes.io/control-plane
|
||||
operator: Equal
|
||||
value: ""
|
||||
effect: NoSchedule
|
||||
|
||||
## If specified, the pod's topology spread constraints.
|
||||
## ref: https://kubernetes.io/docs/concepts/workloads/pods/pod-topology-spread-constraints/
|
||||
@@ -2736,10 +2710,10 @@ spec:
|
||||
## https://github.com/prometheus-operator/prometheus-operator/blob/main/Documentation/api.md
|
||||
##
|
||||
securityContext:
|
||||
runAsGroup: 2000
|
||||
runAsGroup: 1000
|
||||
runAsNonRoot: true
|
||||
runAsUser: 1000
|
||||
fsGroup: 2000
|
||||
fsGroup: 1000
|
||||
|
||||
## Priority class assigned to the Pods
|
||||
##
|
||||
|
||||
Reference in New Issue
Block a user