readOnlyFilesystem: true for neutron chart

Fix for adding readOnlyFilesystem flag at pod level

Change-Id: I9ba18101a4566329f288d77677d4255646935dd5
This commit is contained in:
pd2839 2019-02-26 15:15:50 -06:00 committed by Chris Wedgwood
parent ff146ea9fd
commit 6d7724c790
1 changed files with 2 additions and 0 deletions

View File

@ -49,6 +49,8 @@ spec:
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
spec:
securityContext:
readOnlyRootFilesystem: true
{{ dict "envAll" $envAll "application" "neutron" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
serviceAccountName: {{ $serviceAccountName }}
affinity: