From 475647036a1e89ee91c353b4589bbd569278e33a Mon Sep 17 00:00:00 2001 From: Rahul Khiyani Date: Tue, 26 Feb 2019 06:36:47 -0500 Subject: [PATCH] readOnlyFilesystem: true for memcached chart Fix for adding readOnlyFilesystem flag at pod level Change-Id: I57b77eca9c1091bd080279e1fa808c8b0c67c5c7 --- memcached/templates/deployment.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/memcached/templates/deployment.yaml b/memcached/templates/deployment.yaml index 060624952..d691c84b0 100644 --- a/memcached/templates/deployment.yaml +++ b/memcached/templates/deployment.yaml @@ -43,6 +43,8 @@ spec: labels: {{ tuple $envAll "memcached" "server" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }} spec: + securityContext: + readOnlyRootFilesystem: true shareProcessNamespace: true serviceAccountName: {{ $rcControllerName | quote }} affinity: