+1 -1

.tangled/workflows/workflow-arm64.yaml

reviewed

··· 1 1 engine: kubernetes 2 2 - image: golang:1.24-bookworm 2 2 + image: golang:1.25-trixie 3 3 architecture: arm64 4 4 5 5 steps:

+1

config/manager/kustomization.yaml

reviewed

··· 1 1 resources: 2 2 - manager.yaml 3 3 - service.yaml 4 4 + - pvc.yaml 4 5 apiVersion: kustomize.config.k8s.io/v1beta1 5 6 kind: Kustomization 6 7 images:

+8 -1

config/manager/manager.yaml

reviewed

··· 49 49 # This ensures that deployments meet the highest security requirements for Kubernetes. 50 50 # For more details, see: https://kubernetes.io/docs/concepts/security/pod-security-standards/#restricted 51 51 runAsNonRoot: true 52 52 + runAsUser: 65532 53 53 + fsGroup: 65532 52 54 seccompProfile: 53 55 type: RuntimeDefault 54 56 containers: ··· 66 68 - name: SPINDLE_SERVER_OWNER 67 69 value: "did:plc:pddp4xt5lgnv2qsegbzzs4xg" 68 70 - name: SPINDLE_SERVER_DB_PATH 69 69 - value: "/tmp/spindle.db" 71 71 + value: "/data/spindle.db" 70 72 - name: SPINDLE_SERVER_LOG_DIR 71 73 value: "/tmp/spindle-logs" 72 74 ports: [] ··· 99 101 volumeMounts: 100 102 - name: spindle-logs 101 103 mountPath: /tmp/spindle-logs 104 104 + - name: spindle-db 105 105 + mountPath: /data 102 106 volumes: 103 107 - name: spindle-logs 104 108 emptyDir: {} 109 109 + - name: spindle-db 110 110 + persistentVolumeClaim: 111 111 + claimName: spindle-db 105 112 serviceAccountName: controller-manager 106 113 terminationGracePeriodSeconds: 10