Browse Source

Merge "readOnlyFilesystem: true for horizon chart"

Zuul 1 month ago
parent
commit
a34c430590
1 changed files with 2 additions and 0 deletions
  1. 2
    0
      horizon/templates/deployment.yaml

+ 2
- 0
horizon/templates/deployment.yaml View File

@@ -46,6 +46,8 @@ spec:
46 46
         configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
47 47
         configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
48 48
     spec:
49
+      securityContext:
50
+        readOnlyRootFilesystem: true
49 51
       serviceAccountName: {{ $serviceAccountName }}
50 52
 {{ dict "envAll" $envAll "application" "horizon" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
51 53
       affinity:

Loading…
Cancel
Save