Refactor ansible-apply.yaml and inventory/hosts, add ansible.cfg

2024-09-26 20:06:47 +02:00
parent 0f64b867de
commit a6c8ab5127
262 changed files with 128 additions and 1955137 deletions
@@ -120,6 +120,9 @@ resource "kubernetes_cron_job_v1" "backup_job" {
                "find /backup -type f -name '${var.app_name}-files-*.tar.gz' -mtime +${var.retention_days} | xargs --no-run-if-empty rm",
                "/usr/local/bin/rclone --config=/etc/rclone.conf sync --progress /backup scaleway:$BUCKET_NAME/${var.app_name}-backup"
              ])]
+              security_context {
+                allow_privilege_escalation = false
+              }
              volume_mount {
                name       = "backup-storage"
                mount_path = "/backup"