Merge "Openvswitch: Add read-only-fs"

2019-05-09 21:12:53 +00:00
parent ead842d1d8 fafc14f043
commit 96fcdf1c45
1 changed files with 2 additions and 0 deletions
--- a/openvswitch/values.yaml
+++ b/openvswitch/values.yaml
@@ -60,11 +60,13 @@ pod:
          capabilities:
            add:
              - SYS_MODULE
+          readOnlyRootFilesystem: true
        vswitchd:
          runAsUser: 0
          capabilities:
            add:
              - NET_ADMIN
+          readOnlyRootFilesystem: true
  lifecycle:
    upgrades:
      daemonsets: