openstack/openstack-helm
Code Issues Proposed changes

readOnlyFilesystem: true for keystone chart

Browse Source 
Fix for adding readOnlyFilesystem flag at pod level

Change-Id: I37fb7f580ae0a408530d58b195c353e41d701eac
This commit is contained in:
pd2839 2019-02-26 15:08:36 -06:00 committed by PRATEEK REDDY DODDA
parent 66ba0be81c
commit 0c502d2062
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
keystone/templates/deployment-api.yaml
View File

@ -46,6 +46,8 @@ spec:
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
spec:
securityContext:
readOnlyRootFilesystem: true
{{ dict "envAll" $envAll "application" "keystone" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
serviceAccountName: {{ $serviceAccountName }}
affinity: