added comment for root file system flag and updated the key names for tls certificates
Signed-off-by: Rajshekar Reddy <reddymh@gmail.com>
This commit is contained in:
parent
d8715f1ea0
commit
a8bdf3027c
1 changed files with 5 additions and 3 deletions
|
@ -109,12 +109,14 @@ controller:
|
||||||
servicePortName: metrics
|
servicePortName: metrics
|
||||||
# -- the controller container's securityContext
|
# -- the controller container's securityContext
|
||||||
securityContext:
|
securityContext:
|
||||||
readOnlyRootFilesystem: false
|
readOnlyRootFilesystem: true
|
||||||
runAsNonRoot: true
|
runAsNonRoot: true
|
||||||
allowPrivilegeEscalation: false
|
allowPrivilegeEscalation: false
|
||||||
capabilities:
|
capabilities:
|
||||||
drop:
|
drop:
|
||||||
- ALL
|
- ALL
|
||||||
|
# # readOnlyRootFilesystem should be false SSL when using postgres
|
||||||
|
# readOnlyRootFilesystem: false
|
||||||
# -- enable persistence using postgres
|
# -- enable persistence using postgres
|
||||||
persistence: {}
|
persistence: {}
|
||||||
# connectionPool:
|
# connectionPool:
|
||||||
|
@ -141,10 +143,10 @@ controller:
|
||||||
# caCertSecret:
|
# caCertSecret:
|
||||||
# name: argo-postgres-tls
|
# name: argo-postgres-tls
|
||||||
# key: ca.crt
|
# key: ca.crt
|
||||||
# serverCertSecret:
|
# clientCertSecret:
|
||||||
# name: argo-postgres-tls
|
# name: argo-postgres-tls
|
||||||
# key: tls.crt
|
# key: tls.crt
|
||||||
# serverKeySecret:
|
# clientKeySecret:
|
||||||
# name: argo-postgres-tls
|
# name: argo-postgres-tls
|
||||||
# key: tls.key
|
# key: tls.key
|
||||||
# # default path to store postgres certificates if certPath is not defined: /home/argo/pgcerts
|
# # default path to store postgres certificates if certPath is not defined: /home/argo/pgcerts
|
||||||
|
|
Loading…
Reference in a new issue