openstack/openstack-helm-infra
Code Issues Proposed changes

readOnlyFilesystem: true for ingress chart

Browse Source 
Fix for adding readOnlyFilesystem flag at pod level

Change-Id: Icc8fa3aae2d80e1038d7335af9a0a51885f9dad8
This commit is contained in:
Rahul Khiyani 2019-02-26 05:13:32 -05:00
parent 6ea80fa151
commit 9a34331bcf
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ingress/templates/deployment-ingress.yaml
View File

@ -175,6 +175,8 @@ spec:
{{ tuple $envAll "ingress" "server" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
app: ingress-api
spec:
securityContext:
readOnlyRootFilesystem: true
shareProcessNamespace: true
serviceAccountName: {{ $serviceAccountName }}
{{- if eq .Values.deployment.type "Deployment" }}