From 3272f44f1a3a5b5dbe1705f5376f10ea9bd7f13d Mon Sep 17 00:00:00 2001
From: Wayne Starr <me@racer159.com>
Date: Tue, 3 Sep 2024 15:00:44 -0600
Subject: [PATCH] fix: update required values discovered during deployment

---
 .gitignore                      | 1 +
 src/trillian/values/values.yaml | 5 +++++
 src/tsa/values/values.yaml      | 3 +++
 3 files changed, 9 insertions(+)

diff --git a/.gitignore b/.gitignore
index 0400e09..98fa0a6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,6 +9,7 @@ tmp/
 *.crt
 *.key
 *.csr
+*.srl
 *.pem
 *.der
 *.tmp.*
diff --git a/src/trillian/values/values.yaml b/src/trillian/values/values.yaml
index 1c31955..7ec4bfe 100644
--- a/src/trillian/values/values.yaml
+++ b/src/trillian/values/values.yaml
@@ -5,6 +5,11 @@ mysql:
         port: 3306
         protocol: TCP
         targetPort: 3306
+  securityContext:
+    runAsUser: 1000
+    runAsGroup: 1000
+    runAsNonRoot: true
+    fsGroup: 1000
 
 # the trillian mysql image is already configured with the DB
 # this job does not wait for mysql to come up so will just enter an error state
diff --git a/src/tsa/values/values.yaml b/src/tsa/values/values.yaml
index b827b9d..43c5aa7 100644
--- a/src/tsa/values/values.yaml
+++ b/src/tsa/values/values.yaml
@@ -16,6 +16,9 @@ server:
         port: 2112
         protocol: TCP
         targetPort: 2112
+  ingress:
+    http:
+      enabled: false
 
 namespace:
   name: tsa-system