fix

pagopa · Feb 13, 2025 · 3850bad · 3850bad
1 parent acfe11a
commit 3850bad
Show file tree

Hide file tree

Showing 3 changed files with 31 additions and 34 deletions.
diff --git a/helm/values-dev.yaml b/helm/values-dev.yaml
@@ -37,21 +37,20 @@ microservice-chart:
     failureThreshold: 10
   deployment:
     create: true
-  # serviceMonitor:
-  #   create: true
-  #   endpoints:
-  #     - interval: 10s #jmx-exporter
-  #       targetPort: 12345
-  #       path: /metrics
+  serviceMonitor:
+    create: true
+    endpoints:
+      - interval: 10s #jmx-exporter
+        targetPort: 12345
+        path: /metrics
   ports:
-    - 80 #http
     - 12345 #jmx-exporter
     - 8080
   service:
     type: ClusterIP
     ports:
-      - 80 #http
       - 8080
+      - 12345 #jmx-exporter
   ingress:
     create: true
     host: "weudev.fdr.internal.dev.platform.pagopa.it"
@@ -67,13 +66,6 @@ microservice-chart:
       type: RuntimeDefault
   securityContext:
     allowPrivilegeEscalation: false
-    # readOnlyRootFilesystem: true
-    # capabilities:
-    #   add:
-    #     - NET_BIND_SERVICE
-  volumes:
-    - emptyDir: {}
-      name: tmpvol
   resources:
     requests:
       memory: "256Mi"

diff --git a/helm/values-prod.yaml b/helm/values-prod.yaml
@@ -1,6 +1,6 @@
 microservice-chart:
   namespace: "fdr"
-  nameOverride: ""
+  nameOverride: "pagopa-fdr-2-event"
   fullnameOverride: "pagopa-fdr-2-event-hub"
   image:
     repository: ghcr.io/pagopa/pagopa-fdr-2-event-hub
@@ -24,14 +24,14 @@ microservice-chart:
   livenessProbe:
     handlerType: tcpSocket
     tcpSocket:
-      port: 80
+      port: 8080
     initialDelaySeconds: 60
     periodSeconds: 30
     failureThreshold: 10
   readinessProbe:
     handlerType: tcpSocket
     tcpSocket:
-      port: 80
+      port: 8080
     initialDelaySeconds: 60
     periodSeconds: 30
     failureThreshold: 10
@@ -44,12 +44,12 @@ microservice-chart:
         targetPort: 12345
         path: /metrics
   ports:
-    - 80 #http
     - 12345 #jmx-exporter
+    - 8080
   service:
     type: ClusterIP
     ports:
-      - 80 #http
+      - 8080
       - 12345 #jmx-exporter
   ingress:
     create: true
@@ -65,9 +65,7 @@ microservice-chart:
     seccompProfile:
       type: RuntimeDefault
   securityContext:
-    capabilities:
-      add:
-        - NET_BIND_SERVICE
+    allowPrivilegeEscalation: false
   resources:
     requests:
       memory: "768Mi"
@@ -100,6 +98,7 @@ microservice-chart:
     BLOB_STORAGE_FDR3_CONTAINER: "fdr3-flows"
     EVENT_HUB_FLOWTX_NAME: "fdr-qi-flows"
     EVENT_HUB_REPORTEDIUV_NAME: "fdr-qi-reported-iuv"
+    ASPNETCORE_URLS: "http://*:8080"
     FUNCTIONS_SECRETS_PATH: "/tmp/secrets"
   envFieldRef:
     APP_NAME: "metadata.labels['app.kubernetes.io/instance']"
@@ -115,6 +114,14 @@ microservice-chart:
     tenantId: "7788edaf-0346-4068-9d79-c868aed15b3d"
   nodeSelector: {}
   tolerations: []
-  affinity: {}
+  affinity:
+    nodeAffinity:
+      requiredDuringSchedulingIgnoredDuringExecution:
+        nodeSelectorTerms:
+          - matchExpressions:
+              - key: node_type
+                operator: In
+                values:
+                  - 'user'
   canaryDelivery:
     create: false
diff --git a/helm/values-uat.yaml b/helm/values-uat.yaml
@@ -37,12 +37,12 @@ microservice-chart:
     failureThreshold: 10
   deployment:
     create: true
-  # serviceMonitor:
-  #   create: true
-  #   endpoints:
-  #     - interval: 10s #jmx-exporter
-  #       targetPort: 12345
-  #       path: /metrics
+  serviceMonitor:
+    create: true
+    endpoints:
+      - interval: 10s #jmx-exporter
+        targetPort: 12345
+        path: /metrics
   ports:
     - 12345 #jmx-exporter
     - 8080
@@ -65,9 +65,7 @@ microservice-chart:
     seccompProfile:
       type: RuntimeDefault
   securityContext:
-    capabilities:
-      add:
-        - NET_BIND_SERVICE
+    allowPrivilegeEscalation: false
   resources:
     requests:
       memory: "768Mi"
@@ -100,8 +98,8 @@ microservice-chart:
     BLOB_STORAGE_FDR3_CONTAINER: "fdr3-flows"
     EVENT_HUB_FLOWTX_NAME: "fdr-qi-flows"
     EVENT_HUB_REPORTEDIUV_NAME: "fdr-qi-reported-iuv"
-    FUNCTIONS_SECRETS_PATH: "/tmp/secrets"
     ASPNETCORE_URLS: "http://*:8080"
+    FUNCTIONS_SECRETS_PATH: "/tmp/secrets"
   envFieldRef:
     APP_NAME: "metadata.labels['app.kubernetes.io/instance']"
     APP_VERSION: "metadata.labels['app.kubernetes.io/version']"