Refactor squid configuration to include readiness and liveness probes, resource requests, and security context

2024-09-26 12:03:33 +02:00
parent 605b3dd912
commit 6cb291a9ea
2 changed files with 32 additions and 1 deletions
@@ -210,6 +210,34 @@ resource "kubernetes_deployment" "proxy_pt" {
            protocol       = "TCP"
          }

+          readiness_probe {
+            tcp_socket {
+              port = "proxy"
+            }
+            initial_delay_seconds = 10
+            timeout_seconds       = 4
+          }
+
+          liveness_probe {
+            tcp_socket {
+              port = "proxy"
+            }
+            initial_delay_seconds = 10
+            timeout_seconds       = 4
+          }
+
+          resources {
+            requests = {
+              memory = "256Mi"
+            }
+          }
+
+          security_context {
+            allow_privilege_escalation = false
+            run_as_user                = 1000
+            run_as_group               = 1000
+          }
+
          volume_mount {
            name       = "squid-config"
            mount_path = "/etc/squid"