From 6a19f3e1c56146bb7502dada38f9d1e0ffbbef9e Mon Sep 17 00:00:00 2001 From: RAHUL KHIYANI Date: Thu, 16 May 2019 14:10:15 -0500 Subject: [PATCH] Fluent-logging: Fix read-only-fs This PS adds the default read-only-rootfs to true for fluent-logging chart Change-Id: I82084c2712f5d1a99c5206e1488f60ae2819d007 --- fluent-logging/values.yaml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/fluent-logging/values.yaml b/fluent-logging/values.yaml index 592998504..e5bff62f0 100644 --- a/fluent-logging/values.yaml +++ b/fluent-logging/values.yaml @@ -590,35 +590,35 @@ pod: container: fluentbit: runAsUser: 0 - readOnlyRootFilesystem: false + readOnlyRootFilesystem: true internal: pod: runAsUser: 65534 container: fluentd: allowPrivilegeEscalation: false - readOnlyRootFilesystem: false + readOnlyRootFilesystem: true elasticsearch_template: pod: runAsUser: 65534 container: elasticsearch_template: allowPrivilegeEscalation: false - readOnlyRootFilesystem: false + readOnlyRootFilesystem: true test: pod: runAsUser: 65534 container: helm_test: allowPrivilegeEscalation: false - readOnlyRootFilesystem: false + readOnlyRootFilesystem: true exporter: pod: runAsUser: 65534 container: fluentd_exporter: allowPrivilegeEscalation: false - readOnlyRootFilesystem: false + readOnlyRootFilesystem: true affinity: anti: type: