Update manifest

files/drone-runner/drone-runner.yaml

@@ -1,27 +1,60 @@
+# Source: drone-runner-kube/templates/deployment.yaml
 apiVersion: apps/v1
 kind: Deployment
 metadata:
-  name: drone-runner
+  name: drone-runner-kube
   namespace: drone
   labels:
-    app.kubernetes.io/name: drone
+    helm.sh/chart: drone-runner-kube-0.1.2
+    app.kubernetes.io/name: drone-runner-kube
+    app.kubernetes.io/instance: drone
+    app.kubernetes.io/component: drone-runner-kube
+    app.kubernetes.io/version: "1.0.0-beta.1"
+    app.kubernetes.io/managed-by: Helm
 spec:
   replicas: 1
   selector:
     matchLabels:
-      app.kubernetes.io/name: drone
+      app.kubernetes.io/name: drone-runner-kube
+      app.kubernetes.io/instance: drone
+      app.kubernetes.io/component: drone-runner-kube
   template:
     metadata:
       labels:
-        app.kubernetes.io/name: drone
+        app.kubernetes.io/name: drone-runner-kube
+        app.kubernetes.io/instance: drone
+        app.kubernetes.io/component: drone-runner-kube
+      annotations:
+        checksum/secrets: b814aeaecb42fa8651875d365b7bd4251112dc6fde7b1c82a41a5f37cdb9f34a
     spec:
+      serviceAccountName: drone-runner-kube
+      securityContext:
+        fsGroup: 2000
+      terminationGracePeriodSeconds: 3600
       containers:
-      - name: drone-runner
-        image: drone/drone-runner-kube:latest
-        ports:
-        - containerPort: 3000
-        envFrom:
-          - configMapRef:
-              name: drone-runner
-          - secretRef:
-              name: drone-runner
+        - name: server
+          securityContext:
+            capabilities:
+              drop:
+              - ALL
+            readOnlyRootFilesystem: true
+            runAsNonRoot: true
+            runAsUser: 1000
+          image: "drone/drone-runner-kube:1.0.0-beta.1"
+          imagePullPolicy: IfNotPresent
+          ports:
+            - name: http
+              containerPort: 3000
+              protocol: TCP
+          resources:
+            limits:
+              cpu: 100m
+              memory: 128Mi
+            requests:
+              cpu: 100m
+              memory: 128Mi
+          envFrom:
+            - configMapRef:
+                name: drone-runner-kube
+            - secretRef:
+                name: drone-runner