summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorpd2839 <pd2839@att.com>2019-02-26 15:35:50 -0600
committerPRATEEK REDDY DODDA <pd2839@att.com>2019-03-07 05:09:28 +0000
commit294866a81c9a636dea372960ef26c4b1170813a3 (patch)
tree3a78a058563034d966e0676403f6735cce23d451
parent7dddd7290630329e21a116cad50a2e770269deea (diff)
readOnlyFilesystem: true for heat chart
fix for adding readOnlyFilesystem flag at pod level Change-Id: I014cf0f9c6c19e900d3c210a7f52b4e941bc46e7
Notes
Notes (review): Code-Review+2: Pete Birley <petebirley@gmail.com> Code-Review+2: Chris Wedgwood <cw@f00f.org> Workflow+1: Steve Wilkerson <wilkers.steve@gmail.com> Verified+2: Zuul Submitted-by: Zuul Submitted-at: Thu, 07 Mar 2019 17:34:22 +0000 Reviewed-on: https://review.openstack.org/639447 Project: openstack/openstack-helm Branch: refs/heads/master
-rw-r--r--heat/templates/deployment-api.yaml2
-rw-r--r--heat/templates/deployment-cfn.yaml2
-rw-r--r--heat/templates/deployment-cloudwatch.yaml2
-rw-r--r--heat/templates/deployment-engine.yaml2
4 files changed, 8 insertions, 0 deletions
diff --git a/heat/templates/deployment-api.yaml b/heat/templates/deployment-api.yaml
index 50dd48c..ac61535 100644
--- a/heat/templates/deployment-api.yaml
+++ b/heat/templates/deployment-api.yaml
@@ -46,6 +46,8 @@ spec:
46 configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }} 46 configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
47 configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }} 47 configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
48 spec: 48 spec:
49 securityContext:
50 readOnlyRootFilesystem: true
49 serviceAccountName: {{ $serviceAccountName }} 51 serviceAccountName: {{ $serviceAccountName }}
50{{ dict "envAll" $envAll "application" "heat" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }} 52{{ dict "envAll" $envAll "application" "heat" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
51 affinity: 53 affinity:
diff --git a/heat/templates/deployment-cfn.yaml b/heat/templates/deployment-cfn.yaml
index ad91bb6..f1d58b0 100644
--- a/heat/templates/deployment-cfn.yaml
+++ b/heat/templates/deployment-cfn.yaml
@@ -46,6 +46,8 @@ spec:
46 configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }} 46 configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
47 configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }} 47 configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
48 spec: 48 spec:
49 securityContext:
50 readOnlyRootFilesystem: true
49 serviceAccountName: {{ $serviceAccountName }} 51 serviceAccountName: {{ $serviceAccountName }}
50{{ dict "envAll" $envAll "application" "heat" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }} 52{{ dict "envAll" $envAll "application" "heat" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
51 affinity: 53 affinity:
diff --git a/heat/templates/deployment-cloudwatch.yaml b/heat/templates/deployment-cloudwatch.yaml
index a89ad13..fc0173f 100644
--- a/heat/templates/deployment-cloudwatch.yaml
+++ b/heat/templates/deployment-cloudwatch.yaml
@@ -46,6 +46,8 @@ spec:
46 configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }} 46 configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
47 configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }} 47 configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
48 spec: 48 spec:
49 securityContext:
50 readOnlyRootFilesystem: true
49 serviceAccountName: {{ $serviceAccountName }} 51 serviceAccountName: {{ $serviceAccountName }}
50{{ dict "envAll" $envAll "application" "heat" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }} 52{{ dict "envAll" $envAll "application" "heat" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
51 affinity: 53 affinity:
diff --git a/heat/templates/deployment-engine.yaml b/heat/templates/deployment-engine.yaml
index 5c091a0..b3d0a02 100644
--- a/heat/templates/deployment-engine.yaml
+++ b/heat/templates/deployment-engine.yaml
@@ -54,6 +54,8 @@ spec:
54 configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }} 54 configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
55{{- end }} 55{{- end }}
56 spec: 56 spec:
57 securityContext:
58 readOnlyRootFilesystem: true
57 serviceAccountName: {{ $serviceAccountName }} 59 serviceAccountName: {{ $serviceAccountName }}
58{{ dict "envAll" $envAll "application" "heat" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }} 60{{ dict "envAll" $envAll "application" "heat" | include "helm-toolkit.snippets.kubernetes_pod_security_context" | indent 6 }}
59 affinity: 61 affinity: