[ingress-nginx] upgrade to 1.12.0 (#11846)

2026-03-09 19:58:07 +03:00 · 2025-01-02 04:58:14 +01:00
parent 0222a2a634
commit 9ec9b3a202
5 changed files with 14 additions and 10 deletions
--- a/roles/kubernetes-apps/ingress_controller/ingress_nginx/templates/ds-ingress-nginx-controller.yml.j2
+++ b/roles/kubernetes-apps/ingress_controller/ingress_nginx/templates/ds-ingress-nginx-controller.yml.j2
@@ -30,15 +30,18 @@ spec:
        - /init_module
        image: {{ ingress_nginx_opentelemetry_image_repo }}:{{ ingress_nginx_opentelemetry_image_tag }}
        securityContext:
-          runAsNonRoot: true
-          runAsUser: 65532
          allowPrivilegeEscalation: false
+          capabilities:
+            add:
+            - NET_BIND_SERVICE
+            drop:
+            - ALL
+          readOnlyRootFilesystem: false
+          runAsGroup: 82
+          runAsNonRoot: true
+          runAsUser: 101
          seccompProfile:
            type: RuntimeDefault
-          capabilities:
-            drop:
-              - ALL
-          readOnlyRootFilesystem: true
        volumeMounts:
        - mountPath: /modules_mount
          name: modules