readOnlyFilesystem: true for ingress chart

Fix for adding readOnlyFilesystem flag at pod level Change-Id: Icc8fa3aae2d80e1038d7335af9a0a51885f9dad8
2019-02-26 05:13:32 -05:00 · 2019-02-26 05:13:32 -05:00 · 9a34331bcf
parent 6ea80fa151
commit 9a34331bcf
1 changed files with 2 additions and 0 deletions
--- a/ingress/templates/deployment-ingress.yaml
+++ b/ingress/templates/deployment-ingress.yaml
@ -175,6 +175,8 @@ spec:
 {{ tuple $envAll "ingress" "server" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
        app: ingress-api
    spec:
+      securityContext:
+        readOnlyRootFilesystem: true
      shareProcessNamespace: true
      serviceAccountName: {{ $serviceAccountName }}
 {{- if eq .Values.deployment.type "Deployment" }}