aly.codes / infra
Hybrid cloud cluster monorepo with Ansible, K8s, NixOS, and Terraform. cute.haus
ansible terraform nix k8s
0
Fork 0

Configure Feed

Select the types of activity you want to include in your feed.

charts: add pod-level seccomp profile to three deployments

Aly Raffauf (Jul 16, 2026, 9:16 PM EDT) 6f752ef3 b8cdeb74

+8 -3
+3 -3
k8s/charts/audiobookshelf/templates/deployment.yaml
··· 19 19 automountServiceAccountToken: false 20 20 enableServiceLinks: false 21 21 terminationGracePeriodSeconds: 30 22 + securityContext: 23 + seccompProfile: 24 + type: RuntimeDefault 22 25 tolerations: 23 26 - key: node.kubernetes.io/not-ready 24 27 operator: Exists ··· 32 35 - name: {{ .Chart.Name }} 33 36 image: ghcr.io/advplyr/audiobookshelf:2.35.1@sha256:1eef6716183c52abafe5405e7d6be8390248ecd59c7488c44af871757ac8fc4d 34 37 imagePullPolicy: IfNotPresent 35 - securityContext: 36 - seccompProfile: 37 - type: RuntimeDefault 38 38 env: 39 39 - name: TZ 40 40 value: "America/New_York"
+3
k8s/charts/collabora/templates/deployment.yaml
··· 19 19 automountServiceAccountToken: false 20 20 enableServiceLinks: false 21 21 terminationGracePeriodSeconds: 30 22 + securityContext: 23 + seccompProfile: 24 + type: RuntimeDefault 22 25 tolerations: 23 26 - key: node.kubernetes.io/not-ready 24 27 operator: Exists
+2
k8s/charts/paperless/templates/deployment.yaml
··· 21 21 terminationGracePeriodSeconds: 30 22 22 securityContext: 23 23 fsGroup: 1000 24 + seccompProfile: 25 + type: RuntimeDefault 24 26 tolerations: 25 27 - key: node.kubernetes.io/not-ready 26 28 operator: Exists