fix: Mount emptyDir on repoServer for /tmp and /app/config/gpg/keys

The emptyDir for /app/config/gpg/keys was already implemented in the plain
manifests in the main project: https://github.com/argoproj/argo-cd/pull/4136

Signed-off-by: Marco Kilchhofer <marco@kilchhofer.info>
This commit is contained in:
Marco Kilchhofer 2021-03-09 12:43:40 +01:00
parent 1148824185
commit 56022b9874

View file

@ -1,5 +1,4 @@
{{- $redisHa := (index .Values "redis-ha") -}}
{{- $containerSecurityContext := .Values.repoServer.containerSecurityContext | default dict }}
apiVersion: apps/v1
kind: Deployment
metadata:
@ -83,10 +82,8 @@ spec:
{{- if .Values.repoServer.volumeMounts }}
{{- toYaml .Values.repoServer.volumeMounts | nindent 8}}
{{- end }}
{{- if or .Values.openshift.enabled $containerSecurityContext.readOnlyRootFilesystem }}
- mountPath: /app/config/gpg/keys
name: gpg-keyring
{{- end }}
{{- if .Values.configs.knownHosts }}
- mountPath: /app/config/ssh
name: ssh-known-hosts
@ -95,10 +92,8 @@ spec:
- mountPath: /app/config/tls
name: tls-certs
{{- end }}
{{- if $containerSecurityContext.readOnlyRootFilesystem }}
- mountPath: /tmp
name: tmp-dir
{{- end }}
ports:
- name: repo-server
containerPort: {{ .Values.repoServer.containerPort }}
@ -147,10 +142,8 @@ spec:
{{- if .Values.repoServer.volumes }}
{{- toYaml .Values.repoServer.volumes | nindent 6}}
{{- end }}
{{- if or .Values.openshift.enabled $containerSecurityContext.readOnlyRootFilesystem }}
- emptyDir: {}
name: gpg-keyring
{{- end }}
{{- if .Values.configs.knownHosts }}
- configMap:
name: argocd-ssh-known-hosts-cm
@ -161,10 +154,8 @@ spec:
name: argocd-tls-certs-cm
name: tls-certs
{{- end }}
{{- if $containerSecurityContext.readOnlyRootFilesystem }}
- emptyDir: {}
name: tmp-dir
{{- end }}
{{- if .Values.repoServer.initContainers }}
initContainers:
{{- toYaml .Values.repoServer.initContainers | nindent 6 }}