Merge "readOnlyFilesystem: true for ingress chart"

2019-02-27 19:09:30 +00:00 · 2019-02-27 19:09:30 +00:00 · 7e26ed1b20
commit 7e26ed1b20
parent a88fae1fbb 9a34331bcf
1 changed files with 2 additions and 0 deletions
--- a/ingress/templates/deployment-ingress.yaml
+++ b/ingress/templates/deployment-ingress.yaml
@ -175,6 +175,8 @@ spec:
 {{ tuple $envAll "ingress" "server" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
        app: ingress-api
    spec:
+      securityContext:
+        readOnlyRootFilesystem: true
      shareProcessNamespace: true
      serviceAccountName: {{ $serviceAccountName }}
 {{- if eq .Values.deployment.type "Deployment" }}