From 5ea775ab9bcce50a9c108856c38a9e59e313d22b Mon Sep 17 00:00:00 2001 From: Pete Birley <pete@port.direct> Date: Fri, 15 Feb 2019 12:02:50 -0600 Subject: [PATCH] HTK: Fix k8s pod security context example This PS fixes the k8s prod security context example. Change-Id: I1b1d6875dda852bebb428708d4acf9c460360510 Signed-off-by: Pete Birley <pete@port.direct> --- .../snippets/_kubernetes_pod_security_context.tpl | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/helm-toolkit/templates/snippets/_kubernetes_pod_security_context.tpl b/helm-toolkit/templates/snippets/_kubernetes_pod_security_context.tpl index 09afadf8d..cafb90093 100644 --- a/helm-toolkit/templates/snippets/_kubernetes_pod_security_context.tpl +++ b/helm-toolkit/templates/snippets/_kubernetes_pod_security_context.tpl @@ -22,8 +22,9 @@ values: | user: myApp: uid: 34356 - security_context: - myApp: + myApp: + security_context: + readOnlyRootFilesystem: true seLinuxOptions: level: "s0:c123,c456" usage: | @@ -31,8 +32,9 @@ usage: | return: | securityContext: runAsUser: 34356 + readOnlyRootFilesystem: true seLinuxOptions: - level: "s0:c123,c456" + level: s0:c123,c456 */}} {{- define "helm-toolkit.snippets.kubernetes_pod_security_context" -}}