gcloud-lab/apps/base/customer1/waitlist-api/kustomization.yaml at ceb832b169f0ec40820116955dcb5e97c8a9dc0e - sirius/gcloud-lab - siriusdevops Forgejo

sirius/gcloud-lab

Sirius Devops ac994f144a fix: container hardening + NetworkPolicy for waitlist-api

- deployment.yaml: securityContext (runAsNonRoot, readOnlyRootFilesystem, drop ALL caps)
- network-policy.yaml: egress only to CNPG PG (5432) + api.telegram.org (443)
- kustomization.yaml: register new NetworkPolicy resource
- waitlist-telegram-secret: add admin_api_key field

2026-05-15 00:00:58 +00:00

7 lines

173 B

YAML

Raw Blame History

 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
   - deployment.yaml
   - waitlist-telegram-secret.yaml
   - http-route.yaml
   - network-policy.yaml