Changes for page XWiki (Helm)
Last modified by Itzhak Daniel on 2024/04/29 16:35
From version 8.1
edited by Itzhak Daniel
on 2024/04/28 20:44
on 2024/04/28 20:44
Change comment:
There is no comment for this version
To version 7.1
edited by Itzhak Daniel
on 2024/04/28 20:20
on 2024/04/28 20:20
Change comment:
There is no comment for this version
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -8,7 +8,7 @@ 8 8 9 9 === Security === 10 10 11 -XWiki is running as root by default, we had to rebuild the image in order to enable us to run it as an unprivileged user (uid/gid: 30001). With MySQL we didn't go to the same effort, but in that case we're running the process as uid/gid: 30001 :0, which isfar fromperfect, but much better than running asthe userroot.11 +XWiki is running as root by default, we had to rebuild the image in order to enable us to run it as an unprivileged user (uid/gid: 30001:30001). With MySQL we didn't go to the same effort, but in that case we're running the process as uid/gid: 30001/0, which isn't perfect, but much better than running as root. 12 12 13 13 == Background == 14 14 ... ... @@ -24,6 +24,11 @@ 24 24 ** Automatic storage provisioner (Behemoth LTD special case). 25 25 * Helm 3.12 (probably will work with later versions as well). 26 26 27 + 28 +== Deploying == 29 + 30 +We're going to deploy XWiki as a [[statefulset>>https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/]], the Database (MySQL) and the App, each will have a volume to store their content. 31 + 27 27 === Note about Storage === 28 28 29 29 Behemoth LTD is running an on-prem Kubernetes solutions, we (currently?) don't have any shared storage solution ([[ceph>>https://docs.ceph.com/]], [[nfs>>https://github.com/kubernetes-csi/csi-driver-nfs]], [[...>>https://kubernetes.io/docs/concepts/storage/storage-classes/#provisioner]]) , which require two things: ... ... @@ -30,12 +30,6 @@ 30 30 31 31 1. Creating the path/loop device prior of creating PV. 32 32 1. The PV is manually created. 33 - 34 -== Deploying == 35 - 36 -We're going to deploy XWiki as a [[statefulset>>https://kubernetes.io/docs/concepts/workloads/controllers/statefulset/]], the Database (MySQL) and the App, each will have a volume to store their content. 37 - 38 -=== === 39 39 ))) 40 40 41 41 (% class="col-xs-12 col-sm-4" %)