Browse Source

Merge "readOnlyFilesystem: true for neutron chart"

Zuul 1 month ago
parent
commit
7dddd72906
1 changed files with 2 additions and 0 deletions
  1. 2
    0
      neutron/templates/deployment-server.yaml

+ 2
- 0
neutron/templates/deployment-server.yaml View File

@@ -49,6 +49,8 @@ spec:
49 49
         configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
50 50
         configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
51 51
     spec:
52
+      securityContext:
53
+        readOnlyRootFilesystem: true
52 54
 {{ dict "envAll" $envAll "application" "neutron" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
53 55
       serviceAccountName: {{ $serviceAccountName }}
54 56
       affinity:

Loading…
Cancel
Save