openstack/openstack-helm-infra
Code Issues Proposed changes

readOnlyRootFilesystem: true for openvswitch chart

Browse Source 
Fix for adding readOnlyRootFilesystem flag at pod
level

Change-Id: If0943518bdec0d950c50c90aa89929d1a42aa0a0
This commit is contained in:
Rahul Khiyani 2019-02-26 06:53:31 -05:00 committed by Chris Wedgwood
parent 8fb2c7f07c
commit 598040bea0
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
openvswitch/templates/daemonset-ovs-db.yaml
View File

@ -40,6 +40,8 @@ spec:
annotations: annotations:
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }} configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
spec: spec:
securityContext:
readOnlyRootFilesystem: true
shareProcessNamespace: true shareProcessNamespace: true
serviceAccountName: {{ $serviceAccountName }} serviceAccountName: {{ $serviceAccountName }}
nodeSelector: nodeSelector:

2
openvswitch/templates/daemonset-ovs-vswitchd.yaml
View File

@ -40,6 +40,8 @@ spec:
annotations: annotations:
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }} configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
spec: spec:
securityContext:
readOnlyRootFilesystem: true
shareProcessNamespace: true shareProcessNamespace: true
serviceAccountName: {{ $serviceAccountName }} serviceAccountName: {{ $serviceAccountName }}
nodeSelector: nodeSelector: