From 189630ba910c984ad3918b16bcc410597ed57f7b Mon Sep 17 00:00:00 2001 From: Rahul Khiyani Date: Thu, 18 Apr 2019 20:42:13 +0000 Subject: [PATCH] Revert "readOnlyFilesystem: true for elasticsearch chart" This reverts commit ab86685bea6df436c93220ce63900549c19effff. removing readOnlyRootFilesystem flag since pods are running to "crashLoopBackOff" state by implementing HTK functionality when we have set the readOnly flag at pod without HTK functionality the changes were not effected. That is why it passed the gate. Change-Id: Iaa6b89a6a19e8f85d02bf6d06f45570469674d4f --- elasticsearch/templates/deployment-client.yaml | 2 -- elasticsearch/templates/deployment-master.yaml | 2 -- 2 files changed, 4 deletions(-) diff --git a/elasticsearch/templates/deployment-client.yaml b/elasticsearch/templates/deployment-client.yaml index 1c95c675b..da2d39f02 100644 --- a/elasticsearch/templates/deployment-client.yaml +++ b/elasticsearch/templates/deployment-client.yaml @@ -82,8 +82,6 @@ spec: configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }} {{ dict "envAll" $envAll "podName" "elasticsearch-client" "containerNames" (list "elasticsearch-client") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} spec: - securityContext: - readOnlyRootFilesystem: true serviceAccountName: {{ $serviceAccountName }} affinity: {{ tuple $envAll "elasticsearch" "client" | include "helm-toolkit.snippets.kubernetes_pod_anti_affinity" | indent 8 }} diff --git a/elasticsearch/templates/deployment-master.yaml b/elasticsearch/templates/deployment-master.yaml index f0273223a..3ca351682 100644 --- a/elasticsearch/templates/deployment-master.yaml +++ b/elasticsearch/templates/deployment-master.yaml @@ -80,8 +80,6 @@ spec: configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }} {{ dict "envAll" $envAll "podName" "elasticsearch-master" "containerNames" (list "elasticsearch-master") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }} spec: - securityContext: - readOnlyRootFilesystem: true serviceAccountName: {{ $serviceAccountName }} affinity: {{ tuple $envAll "elasticsearch" "master" | include "helm-toolkit.snippets.kubernetes_pod_anti_affinity" | indent 8 }}