Update nginx-deployment.yml

Added some security-related stuff, added limits
AdmiraalA · Feb 21, 2024 · 9a2c17a · 9a2c17a
1 parent 16b46b0
commit 9a2c17a
Showing 1 changed file with 13 additions and 4 deletions.
diff --git a/deployments/nginx/nginx-deployment.yml b/deployments/nginx/nginx-deployment.yml
@@ -18,11 +18,20 @@ spec:
         tier: frontend
     spec:
       containers:
-      - image: nginx:latest
+      - image: nginx:1.25.3
         name: nginx
+        securityContext:
+          allowPrivilegeEscalation: false
+        resources:
+          limits:
+            cpu: "0.5"
+            memory: "500Mi"
+          requests:
+            cpu: "0.1"
+            memory: "100Mi"
         env:
-        - name: SECURE_SUBNET
-          value: 8.8.8.8/32 # change-me
+#        - name: SECURE_SUBNET # Gonna fix later
+#          value: 8.8.8.8/32 # change-me
         - name: KUBE_SVC_NAME
           value: wordpress-svc
         volumeMounts:
@@ -71,4 +80,4 @@ spec:
               path: wordpress.conf.template
       - name: wordpress-persistent-storage
         persistentVolumeClaim:
-          claimName: wordpress-pvc
+          claimName: wordpress-pvc