Sheogorath

In what perspective would this prove security? Helm uses secrets to store its state and it creates secrets to hold that information. From a Kubernetes point of view it doesn't...

> - adding mysql to the image, but I think we should create two separate image, to keep the image the slimest possible (but I do not know if this...

Todos: - [ ] Enable or disable basic services by environment variables - [ ] allow configuration of - [ ] server protocol - [ ] seed - [ ]...

I don't think it should have that impact, it's just updates for good measure. But you can validate it the impact on your cluster, if you want. All you need...

You can run blocky with PSS restrict. PSS restricted allows to add `NET_BIND_SERVICE`. This is how I run blocky in a Namespace with PSS restricted version v1.26: https://git.shivering-isles.com/shivering-isles/infrastructure-gitops/-/blob/37b991bc0f7f4955773bce1df3ef5a0b6ce6cd0f/apps/k8s01/dns/dns.yaml