diff --git a/manifests/errorlab/values.yaml b/manifests/errorlab/values.yaml index 40051f8..eb1b7f8 100644 --- a/manifests/errorlab/values.yaml +++ b/manifests/errorlab/values.yaml @@ -1,10 +1,9 @@ # ── Replica count ───────────────────────────────────────────────────────────── replicaCount: 1 - # ── Image ───────────────────────────────────────────────────────────────────── image: - repository: errorlab # override with your registry, e.g. ghcr.io/dvirl/errorlab - tag: latest + repository: errorlab # override with your registry, e.g. ghcr.io/dvirl/errorlab + tag: master-5a3d738 pullPolicy: IfNotPresent imagePullSecrets: @@ -14,16 +13,15 @@ imagePullSecrets: service: type: ClusterIP port: 80 - # ── Ingress ─────────────────────────────────────────────────────────────────── ingress: enabled: true - className: nginx # set to your ingress class (e.g. "nginx", "traefik") + className: nginx # set to your ingress class (e.g. "nginx", "traefik") annotations: {} - # cert-manager.io/cluster-issuer: letsencrypt-prod - # nginx.ingress.kubernetes.io/force-ssl-redirect: "true" + # cert-manager.io/cluster-issuer: letsencrypt-prod + # nginx.ingress.kubernetes.io/force-ssl-redirect: "true" hosts: - - host: errorlab.lab # replace with your actual hostname + - host: errorlab.lab # replace with your actual hostname paths: - path: / pathType: Prefix @@ -31,7 +29,6 @@ ingress: # - secretName: errorlab-tls # hosts: # - errorlab.lab - # ── Resources ───────────────────────────────────────────────────────────────── resources: requests: @@ -40,23 +37,19 @@ resources: limits: cpu: 100m memory: 64Mi - # ── Pod settings ────────────────────────────────────────────────────────────── podAnnotations: {} podLabels: {} - podSecurityContext: runAsNonRoot: true - runAsUser: 101 # nginx user in nginx:alpine + runAsUser: 101 # nginx user in nginx:alpine fsGroup: 101 - securityContext: allowPrivilegeEscalation: false - readOnlyRootFilesystem: false # nginx needs to write to /var/cache/nginx + readOnlyRootFilesystem: false # nginx needs to write to /var/cache/nginx capabilities: drop: - ALL - # ── Probes ──────────────────────────────────────────────────────────────────── livenessProbe: httpGet: @@ -64,25 +57,21 @@ livenessProbe: port: http initialDelaySeconds: 5 periodSeconds: 20 - readinessProbe: httpGet: path: / port: http initialDelaySeconds: 3 periodSeconds: 10 - # ── Autoscaling (disabled by default for a static site) ─────────────────────── autoscaling: enabled: false minReplicas: 1 maxReplicas: 3 targetCPUUtilizationPercentage: 80 - # ── Misc ────────────────────────────────────────────────────────────────────── nameOverride: "" fullnameOverride: "" - nodeSelector: {} tolerations: [] affinity: {}