image: repository: redis tag: "7-alpine" pullPolicy: IfNotPresent auth: # À surcharger via --set auth.password=xxx password: "" persistence: size: 2Gi storageClass: "" accessMode: ReadWriteOnce resources: requests: cpu: 100m memory: 128Mi limits: cpu: 500m memory: 512Mi service: type: ClusterIP port: 6379 config: maxmemory: "256mb" # allkeys-lru : expulse les clés les moins récemment utilisées quand la mémoire est pleine maxmemoryPolicy: "allkeys-lru" appendonly: "yes" appendfsync: "everysec" # Désactiver les snapshots RDB (AOF suffit) save: "" podSecurityContext: runAsUser: 999 runAsGroup: 999 fsGroup: 999 securityContext: allowPrivilegeEscalation: false readOnlyRootFilesystem: true capabilities: drop: - ALL