diff --git a/deployments/templates/deployment.yml b/deployments/templates/deployment.yml index 110d7213..b8318da1 100644 --- a/deployments/templates/deployment.yml +++ b/deployments/templates/deployment.yml @@ -142,6 +142,8 @@ spec: runAsNonRoot: true seccompProfile: type: RuntimeDefault + capabilities: + drop: ["ALL"] volumeMounts: - mountPath: /tmp name: tmp diff --git a/deployments/templates/ingress.yml b/deployments/templates/ingress.yml index 9cd29cbf..5176ac7e 100644 --- a/deployments/templates/ingress.yml +++ b/deployments/templates/ingress.yml @@ -1,9 +1,9 @@ apiVersion: networking.k8s.io/v1 kind: Ingress metadata: - name: find-moj-data-ingress + name: find-moj-data-ingress-${ENV} annotations: - external-dns.alpha.kubernetes.io/set-identifier: find-moj-data-ingress-${NAMESPACE}-green + external-dns.alpha.kubernetes.io/set-identifier: find-moj-data-ingress-${ENV}-${NAMESPACE}-green external-dns.alpha.kubernetes.io/aws-weight: "100" nginx.ingress.kubernetes.io/limit-whitelist: ${LIMIT_WHITELIST} nginx.ingress.kubernetes.io/limit-rps: "200"