Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

postgres: postgres:17-alpine + securityContext #19

Merged
merged 1 commit into from
Oct 15, 2024

Conversation

mathieu-benoit
Copy link
Contributor

@mathieu-benoit mathieu-benoit commented Oct 10, 2024

More security for the default postgres in-cluster res pack:

  • postgres:17-alpine
  • securityContext --> This is required for customers using Pod Security Standard (PSS/PSA) for example.
  • automountServiceAccountToken=false

Not related to this, but also took the initiative to change storage: 10Gi to 1Gi instead, 10Gi was excessive according to me.

Tested with with score-k8s: score-spec/score-k8s#38.

https://github.com/score-spec/sample-score-app successfully deployed in Humanitec with this new postgres res pack:
image

NAME                                          READY   STATUS    RESTARTS        AGE
hello-world-777fd66989-g4jv7                  2/2     Running   1 (4m26s ago)   4m31s
postgres-modules-hello-world-externals-db-0   2/2     Running   0               5m7s

@mathieu-benoit mathieu-benoit requested a review from a team as a code owner October 10, 2024 00:24
@mathieu-benoit mathieu-benoit marked this pull request as draft October 10, 2024 01:37
@mathieu-benoit mathieu-benoit marked this pull request as ready for review October 10, 2024 12:52
@mathieu-benoit
Copy link
Contributor Author

Ready for your review, thanks!

Copy link

@chrishumanitec chrishumanitec left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not tested, but LGTM

@mathieu-benoit mathieu-benoit merged commit 5638c57 into main Oct 15, 2024
1 check passed
@mathieu-benoit mathieu-benoit deleted the postgres-securitycontext branch October 15, 2024 11:36
@mathieu-benoit mathieu-benoit changed the title postgres:17-alpine + securityContext postgres: postgres:17-alpine + securityContext Oct 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants