fix: remove privileged init container, set pod-security baseline for OpenSearch

2026-08-27 21:41:17 -07:00
parent 4524d62568
commit 9a07659ef6
1 changed files with 5 additions and 8 deletions
@@ -7,6 +7,10 @@ apiVersion: v1
 kind: Namespace
 metadata:
  name: poimen
+  labels:
+    pod-security.kubernetes.io/enforce: baseline
+    pod-security.kubernetes.io/audit: baseline
+    pod-security.kubernetes.io/warn: baseline
 ---

 # OpenSearch Service (Headless for StatefulSet discovery)
@@ -108,14 +112,7 @@ spec:
        app.kubernetes.io/name: opensearch
    spec:
      serviceAccountName: opensearch
-      
-      # Init container: set vm.max_map_count (required by Elasticsearch/OpenSearch)
-      initContainers:
-        - name: set-vm-max-map-count
-          image: busybox:1.35
-          command: ['sysctl', '-w', 'vm.max_map_count=262144']
-          securityContext:
-            privileged: true
+      hostNetwork: false
      
      containers:
        - name: opensearch