openstack/openstack-helm-infra
Code Issues Proposed changes

Merge "readOnlyRootFilesystem: true for Prometheus chart"

Browse Source
This commit is contained in:
Zuul 2019-03-07 19:19:21 +00:00 committed by Gerrit Code Review
commit 6497dd568a
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
prometheus/templates/statefulset.yaml
View File

@ -87,6 +87,8 @@ spec:
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
spec:
securityContext:
readOnlyRootFilesystem: true
serviceAccountName: {{ $serviceAccountName }}
affinity:
{{ tuple $envAll "prometheus" "api" | include "helm-toolkit.snippets.kubernetes_pod_anti_affinity" | indent 8 }}