some refinement

2026-04-07 12:44:55 +02:00
parent 89e1db8edf
commit 0ed1cb4355
14 changed files with 390 additions and 104 deletions
@@ -12,9 +12,22 @@ spec:
      labels:
        app: otel-debug-receiver
    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
      containers:
      - name: otel-debug
        image: matst80/otel-debug:latest
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsNonRoot: true
+          runAsUser: 1000
        ports:
        - containerPort: 8080
          name: http
@@ -25,6 +38,11 @@ spec:
        env:
        - name: GRPC_GO_LOG_SEVERITY_LEVEL
          value: "info"
+        - name: OTELLOG_PATH
+          value: "/logs/otel-agent.log"
+        volumeMounts:
+        - name: log-dir
+          mountPath: /logs
        livenessProbe:
          httpGet:
            path: /health
@@ -43,4 +61,7 @@ spec:
            cpu: "100m"
          limits:
            memory: "256Mi"
-            cpu: "500m"
+            cpu: "500m"
+      volumes:
+      - name: log-dir
+        emptyDir: {}