openstack/openstack-helm-infra
Code Issues Proposed changes

readOnlyRootFilesystem: true for kibana chart

Browse Source 
Fix for adding readOnlyRootFilesystem flag at pod
level

Change-Id: Ie2ce8bf66ac1194a319154b58c2980d1260fffe0
This commit is contained in:
Rahul Khiyani 2019-02-27 13:04:29 -05:00
parent 28e0493955
commit 244f177ecb
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
kibana/templates/deployment.yaml
View File

@ -44,6 +44,8 @@ spec:
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }} configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }} configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
spec: spec:
securityContext:
readOnlyRootFilesystem: true
serviceAccountName: {{ $serviceAccountName }} serviceAccountName: {{ $serviceAccountName }}
affinity: affinity:
{{ tuple $envAll "kibana" "dashboard" | include "helm-toolkit.snippets.kubernetes_pod_anti_affinity" | indent 8 }} {{ tuple $envAll "kibana" "dashboard" | include "helm-toolkit.snippets.kubernetes_pod_anti_affinity" | indent 8 }}