[COMMON] Fix Kyverno policy violations in common/mongodb 17/137817/2
authorFiete Ostkamp <Fiete.Ostkamp@telekom.de>
Tue, 30 Apr 2024 11:08:03 +0000 (13:08 +0200)
committerFiete Ostkamp <Fiete.Ostkamp@telekom.de>
Mon, 6 May 2024 08:12:26 +0000 (10:12 +0200)
commitd2b2a3d446a92910fcf3be4c6a3b4254451f730c
tree097843313c5cd6b2f3d807377a615682bca90329
parentc64f1c0954e631709083499f6d1c80258c7809ee
[COMMON] Fix Kyverno policy violations in common/mongodb

- set resourceLimit's for emptyDir volumes
- use non-root group in mongo pods
- make pod filesystem read-only
- bump mongodb chart version from 14.12.2 to 14.12.3
- use new version in portal-ng, nbi, multicloud and dcae-tcagen2

Issue-ID: OOM-3293
Change-Id: Ife7445433337ac97a03f8cd22ad551e8745b9717
Signed-off-by: Fiete Ostkamp <Fiete.Ostkamp@telekom.de>
12 files changed:
kubernetes/common/mongodb/Chart.yaml
kubernetes/common/mongodb/templates/arbiter/statefulset.yaml
kubernetes/common/mongodb/templates/backup/cronjob.yaml
kubernetes/common/mongodb/templates/hidden/statefulset.yaml
kubernetes/common/mongodb/templates/replicaset/statefulset.yaml
kubernetes/common/mongodb/templates/standalone/dep-sts.yaml
kubernetes/common/mongodb/values.yaml
kubernetes/dcaegen2-services/components/dcae-tcagen2/Chart.yaml
kubernetes/multicloud/components/multicloud-k8s/Chart.yaml
kubernetes/nbi/Chart.yaml
kubernetes/portal-ng/components/portal-ng-history/Chart.yaml
kubernetes/portal-ng/components/portal-ng-preferences/Chart.yaml