fix: Add security_context and bump default gatus version to v5.11.0

TwiN · Jul 1, 2024 · bdc7e7a · bdc7e7a
1 parent 13a2749
commit bdc7e7a
Show file tree

Hide file tree

Showing 3 changed files with 23 additions and 17 deletions.
diff --git a/README.md b/README.md
@@ -7,23 +7,23 @@ For documentation on Gatus, see [TwiN/gatus](https://github.com/TwiN/gatus).
 ```hcl
 module "gatus" {
   source                     = "TwiN/gatus/kubernetes"
-  version                    = "2.0.0"
+  version                    = "2.0.1"
   configuration_file_content = file("${path.module}/files/gatus.yaml")
 }
 ```
 
-| Variable                   | Description                              | Default value                 |
-|:-------------------------- |:---------------------------------------- |:----------------------------- |
-| name                       | Name to use for resources                | `gatus`                       | 
-| namespace                  | Namespace in which Gatus will be running | `kube-system`                 |
-| image                      | Image to use for the container           | `twinproduction/gatus:v4.2.0` |
-| configuration_file_content | Gatus configuration. See [TwiN/gatus](https://github.com/TwiN/gatus). | `""` Required |
-| ingress_host               | Ingress host through which Gatus will be exposed. Not created if blank.  | `""` |
-| ingress_annotations        | Ingress annotations.                     | `{}`                          |
-| ingress_tls_secret_name    | Secret name to use for TLS               | `""`                          |
-| memory_request             | Memory request                           | `40M`                         |
-| memory_limit               | Memory limit                             | `100M`                        |
-| cpu_request                | CPU request                              | `30m`                         |
-| cpu_limit                  | CPU limit                                | `250m`                        |
-| node_selector              | Node selectors to use for pods.          | `{}`                          |
-| environment_variables      | Extra environment variables to pass to the container in which Gatus is running. Used for configuration purposes. | `{}` |
+| Variable                   | Description                                                                                                      | Default value                 |
+|:---------------------------|:-----------------------------------------------------------------------------------------------------------------|:------------------------------|
+| name                       | Name to use for resources                                                                                        | `gatus`                       | 
+| namespace                  | Namespace in which Gatus will be running                                                                         | `kube-system`                 |
+| image                      | Image to use for the container                                                                                   | `twinproduction/gatus:v4.2.0` |
+| configuration_file_content | Gatus configuration. See [TwiN/gatus](https://github.com/TwiN/gatus).                                            | `""` Required                 |
+| ingress_host               | Ingress host through which Gatus will be exposed. Not created if blank.                                          | `""`                          |
+| ingress_annotations        | Ingress annotations.                                                                                             | `{}`                          |
+| ingress_tls_secret_name    | Secret name to use for TLS                                                                                       | `""`                          |
+| memory_request             | Memory request                                                                                                   | `40M`                         |
+| memory_limit               | Memory limit                                                                                                     | `100M`                        |
+| cpu_request                | CPU request                                                                                                      | `30m`                         |
+| cpu_limit                  | CPU limit                                                                                                        | `250m`                        |
+| node_selector              | Node selectors to use for pods.                                                                                  | `{}`                          |
+| environment_variables      | Extra environment variables to pass to the container in which Gatus is running. Used for configuration purposes. | `{}`                          |
diff --git a/gatus.tf b/gatus.tf
@@ -94,6 +94,12 @@ resource "kubernetes_deployment_v1" "gatus" {
             name = kubernetes_config_map_v1.gatus.metadata[0].name
           }
         }
+        security_context {
+          sysctl { # Needed for ICMP to work without root privileges
+            name  = "net.ipv4.ping_group_range"
+            value = "0 65536"
+          }
+        }
         node_selector = var.node_selector
       }
     }

diff --git a/variables.tf b/variables.tf
@@ -10,7 +10,7 @@ variable "namespace" {
 
 variable "image" {
   type    = string
-  default = "twinproduction/gatus:v4.2.0"
+  default = "twinproduction/gatus:v5.11.0"
 }
 
 variable "configuration_file_content" {