insecure os

This commit is contained in:
Alexander Rogov
2026-07-12 22:50:21 +03:00
parent a1bb29a232
commit 0e57f7aaba
3 changed files with 3 additions and 27 deletions

View File

@@ -114,9 +114,8 @@ spec:
enabled: true enabled: true
hostname: shared-os.opensearch.svc.cluster.local hostname: shared-os.opensearch.svc.cluster.local
port: 9200 port: 9200
tls: true tls: false
preset: small_cluster preset: small_cluster
existingSecret: mastodon-os
ingress: ingress:
enabled: true enabled: true
className: traefik className: traefik

View File

@@ -1,15 +1,5 @@
apiVersion: v1 apiVersion: v1
kind: Secret kind: Secret
metadata:
name: mastodon-os
namespace: mastodon
type: Opaque
stringData:
username: mastodon
password: "2&ey0J8c1pHbu%kP"
---
apiVersion: v1
kind: Secret
metadata: metadata:
name: os-ca name: os-ca
namespace: mastodon namespace: mastodon

View File

@@ -8,10 +8,8 @@ spec:
version: "3.7.0" version: "3.7.0"
serviceName: shared-os serviceName: shared-os
setVMMaxMapCount: true setVMMaxMapCount: true
security: additionalConfig:
config: plugins.security.disabled: "true"
adminCredentialsSecret:
name: shared-os-admin-credentials
nodePools: nodePools:
- component: nodes - component: nodes
replicas: 3 replicas: 3
@@ -34,14 +32,3 @@ spec:
limits: limits:
cpu: 500m cpu: 500m
memory: 1Gi memory: 1Gi
probes:
readiness:
command:
- /bin/bash
- -c
- curl -k -u "$(cat /mnt/admin-credentials/username):$(cat /mnt/admin-credentials/password)" --silent --fail 'https://localhost:9200'
startup:
command:
- /bin/bash
- -c
- curl -k -u "$(cat /mnt/admin-credentials/username):$(cat /mnt/admin-credentials/password)" --silent --fail 'https://localhost:9200'