openstack/openstack-helm-infra
Code Issues Proposed changes

readOnlyFilesystem: true for rabbitmq chart

Browse Source 
Fix for adding readOnlyFilesystem flag at pod level

Change-Id: I30ef83f1e381d24f40bfc92a1e740746135eceab
This commit is contained in:
Rahul Khiyani 2019-02-26 06:43:42 -05:00 committed by Pete Birley
parent 6ea80fa151
commit 25a86df489
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rabbitmq/templates/statefulset.yaml
View File

@ -78,6 +78,8 @@ spec:
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }} configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }} configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
spec: spec:
securityContext:
readOnlyRootFilesystem: true
serviceAccountName: {{ $rcControllerName | quote }} serviceAccountName: {{ $rcControllerName | quote }}
affinity: affinity:
{{ tuple $envAll "rabbitmq" "server" | include "helm-toolkit.snippets.kubernetes_pod_anti_affinity" | indent 8 }} {{ tuple $envAll "rabbitmq" "server" | include "helm-toolkit.snippets.kubernetes_pod_anti_affinity" | indent 8 }}