From 3c993c317b79640c2f86d91559f6d2b7ec83d17a Mon Sep 17 00:00:00 2001
From: Ian Wienand <iwienand@redhat.com>
Date: Wed, 1 Dec 2021 09:57:05 +1100
Subject: [PATCH] haproxy: map in config as ro

The container shouldn't need to write to its config

Change-Id: Iadbe7b663615623fbd6201aa1f2557b0eb267179
---
 playbooks/roles/haproxy/templates/docker-compose.yaml.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/playbooks/roles/haproxy/templates/docker-compose.yaml.j2 b/playbooks/roles/haproxy/templates/docker-compose.yaml.j2
index 2b8361b266..d28b52c4e1 100644
--- a/playbooks/roles/haproxy/templates/docker-compose.yaml.j2
+++ b/playbooks/roles/haproxy/templates/docker-compose.yaml.j2
@@ -36,7 +36,7 @@ services:
     network_mode: host
     volumes:
       - /dev/log:/dev/log
-      - /var/haproxy/etc:/usr/local/etc/haproxy
+      - /var/haproxy/etc:/usr/local/etc/haproxy:ro
       - /var/haproxy/run:/var/haproxy/run
     logging:
       driver: syslog