openstack/openstack-helm-infra
Code Issues Proposed changes

Elasticsearch: Add read-only-fs

Browse Source 
This PS adds the default read-only-rootfs to true for elasticsearch chart

Change-Id: Iff06ee40e299d7dd4f4724a39ad5eb67eeae19dd
This commit is contained in:
RAHUL KHIYANI 2019-05-08 13:25:23 -05:00 committed by Rahul Khiyani
parent f49ac503dd
commit 9b265d744e
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
elasticsearch/values.yaml
View File

@ -130,7 +130,7 @@ pod:
container:
memory_map_increase:
privileged: true
readOnlyRootFilesystem: false
readOnlyRootFilesystem: true
apache_proxy:
readOnlyRootFilesystem: false
elasticsearch_client:
@ -139,53 +139,53 @@ pod:
add:
- IPC_LOCK
- SYS_RESOURCE
readOnlyRootFilesystem: false
readOnlyRootFilesystem: true
master:
pod:
runAsUser: 0
container:
memory_map_increase:
privileged: true
readOnlyRootFilesystem: false
readOnlyRootFilesystem: true
elasticsearch_master:
privileged: true
capabilities:
add:
- IPC_LOCK
- SYS_RESOURCE
readOnlyRootFilesystem: false
readOnlyRootFilesystem: true
es_cluster_wait:
pod:
runAsUser: 0
container:
elasticsearch_cluster_wait:
readOnlyRootFilesystem: false
readOnlyRootFilesystem: true
snapshot_repository:
pod:
runAsUser: 0
container:
register_snapshot_repository:
readOnlyRootFilesystem: false
readOnlyRootFilesystem: true
test:
pod:
runAsUser: 0
container:
helm_test:
readOnlyRootFilesystem: false
readOnlyRootFilesystem: true
data:
pod:
runAsUser: 0
container:
memory_map_increase:
privileged: true
readOnlyRootFilesystem: false
readOnlyRootFilesystem: true
elasticsearch_data:
privileged: true
capabilities:
add:
- IPC_LOCK
- SYS_RESOURCE
readOnlyRootFilesystem: false
readOnlyRootFilesystem: true
affinity:
anti:
type: