Skip to content

Commit

Permalink
Fix liniting issues
Browse files Browse the repository at this point in the history
  • Loading branch information
fhielpos committed Nov 21, 2023
1 parent 691b14f commit b6a8f49
Showing 1 changed file with 24 additions and 24 deletions.
48 changes: 24 additions & 24 deletions helm/exception-recommender/templates/cleanup/cleanup-job.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -4,11 +4,11 @@ kind: Job
metadata:
name: {{ template "recommender.cleanupJob" . }}
namespace: {{ .Release.Namespace | quote }}
labels:
app.kubernetes.io/component: {{ include "recommender.cleanupJob" . | quote }}
{{- include "labels.selector" . | nindent 8 }}
annotations:
{{- include "recommender.cleanupJobAnnotations" . | nindent 4 }}
labels:
app.kubernetes.io/component: {{ include "recommender.cleanupJob" . | quote }}
{{- include "labels.selector" . | nindent 4 }}
spec:
backoffLimit: 2
template:
Expand All @@ -26,26 +26,26 @@ spec:
effect: NoSchedule
containers:
- name: kubectl
image: "{{ default .Values.image.registry (include "global.imageRegistry" . ) }}/giantswarm/docker-kubectl:{{ .Values.crds.image.tag }}"
command:
- sh
- '-c'
- |
set -o errexit ; set -o xtrace ; set -o nounset
image: "{{ default .Values.image.registry (include "global.imageRegistry" . ) }}/giantswarm/docker-kubectl:{{ .Values.crds.image.tag }}"
command:
- sh
- '-c'
- |
set -o errexit ; set -o xtrace ; set -o nounset
# piping stderr to stdout means kubectl's errors are surfaced
# in the pod's logs.
kubectl delete policyexceptiondrafts -n {{ .Values.recommender.destinationNamespace }} --all 2>&1
securityContext:
seccompProfile:
type: RuntimeDefault
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
privileged: false
runAsNonRoot: true
runAsUser: 65534
runAsGroup: 65534
capabilities:
drop:
- ALL
# piping stderr to stdout means kubectl's errors are surfaced
# in the pod's logs.
kubectl delete policyexceptiondrafts -n {{ .Values.recommender.destinationNamespace }} --all 2>&1
securityContext:
seccompProfile:
type: RuntimeDefault
readOnlyRootFilesystem: true
allowPrivilegeEscalation: false
privileged: false
runAsNonRoot: true
runAsUser: 65534
runAsGroup: 65534
capabilities:
drop:
- ALL
{{- end -}}

0 comments on commit b6a8f49

Please sign in to comment.