openstack/openstack-helm-infra
Code Issues Proposed changes

readOnlyRootFilesystem: true for Grafana chart

Browse Source 
Fix for adding readOnlyRootFilesystem flag at pod
level

Change-Id: Icf0244ca0e5c5eb1b96b17e8b7a64819d1093f0d
This commit is contained in:
Rahul Khiyani 2019-02-28 19:48:18 -05:00
parent cf2c342338
commit 28e0493955
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
grafana/templates/deployment.yaml
View File

@ -44,6 +44,8 @@ spec:
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
spec:
securityContext:
readOnlyRootFilesystem: true
{{ dict "envAll" $envAll "application" "grafana" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
serviceAccountName: {{ $serviceAccountName }}
nodeSelector: