Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

mongodb: mongo:8 and securityContext #21

Merged
merged 1 commit into from
Oct 15, 2024
Merged

Conversation

mathieu-benoit
Copy link
Contributor

@mathieu-benoit mathieu-benoit commented Oct 15, 2024

More security for the default mongodb in-cluster res pack:

  • securityContext --> This is required for customers using Pod Security Standard (PSS/PSA) for example.
  • automountServiceAccountToken=false

Not related to this, but also took the initiative to change:

  • mongo:7 --> mongo:8
  • storage: 10Gi to 1Gi instead, 10Gi was excessive according to me.

Tested with with score-k8s: score-spec/score-k8s#44.

And tested in Humanitec too.

@mathieu-benoit mathieu-benoit requested a review from a team as a code owner October 15, 2024 15:27
@mathieu-benoit mathieu-benoit changed the title Update main.tf - securitContext for mongodb mongodb: mongo:8 and securitContext Oct 15, 2024
@mathieu-benoit mathieu-benoit marked this pull request as draft October 15, 2024 15:30
@mathieu-benoit mathieu-benoit changed the title mongodb: mongo:8 and securitContext mongodb: mongo:8 and securityContext Oct 15, 2024
@mathieu-benoit mathieu-benoit marked this pull request as ready for review October 15, 2024 20:10
@mathieu-benoit mathieu-benoit merged commit 0d8d2e6 into main Oct 15, 2024
1 check passed
@mathieu-benoit mathieu-benoit deleted the mathieu-benoit-patch-1 branch October 15, 2024 20:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant