security-audit: audit-processor af50e663, drop retention config section
New image removes the bucket lifecycle check (retention is owned by terraform minio-buckets lifecycle_rules), so the retention section is dropped from the processor config map.
This commit is contained in:
parent
a60b171bea
commit
a6a176d6c5
@ -45,12 +45,6 @@ data:
|
||||
access_key_file: /vault/secrets/minio-access-key
|
||||
secret_key_file: /vault/secrets/minio-secret-key
|
||||
|
||||
# Срок хранения обеспечивает ILM бакета; processor только проверяет правила при старте.
|
||||
retention:
|
||||
days: 90
|
||||
prefixes: [events/, changes/]
|
||||
check_on_start: true
|
||||
|
||||
http:
|
||||
host: 0.0.0.0
|
||||
port: 8000 # /healthz, /readyz, /metrics
|
||||
|
||||
@ -27,7 +27,7 @@ spec:
|
||||
containers:
|
||||
- name: audit-processor
|
||||
# Образ FROM scratch, USER 65534; CONFIG_PATH=/etc/k8s-audit/config.yaml — в ENTRYPOINT образа.
|
||||
image: cr.yandex/crp3ccidau046kdj8g9q/k8s-audit-processor:394b6f9d
|
||||
image: cr.yandex/crp3ccidau046kdj8g9q/k8s-audit-processor:af50e663
|
||||
ports:
|
||||
- {name: http, containerPort: 8000}
|
||||
readinessProbe:
|
||||
|
||||
Loading…
Reference in New Issue
Block a user