Add readOnlyRootFilesystem to HAProxy and CoreDNS.
- Added security context readOnlyRootFilesystem as true. Change-Id: I84ea5a17f84bebac795e7ed72a7dff530ef081bb
This commit is contained in:
parent
42c947fae6
commit
e84939c574
@ -67,6 +67,8 @@ spec:
|
||||
mountPath: /tmp/etc
|
||||
- name: host
|
||||
mountPath: /host
|
||||
securityContext:
|
||||
readOnlyRootFilesystem: true
|
||||
volumes:
|
||||
- name: haproxy-bin
|
||||
configMap:
|
||||
|
@ -91,3 +91,5 @@ spec:
|
||||
- name: etc
|
||||
hostPath:
|
||||
path: {{ .Values.conf.haproxy.host_config_dir }}
|
||||
securityContext:
|
||||
readOnlyRootFilesystem: true
|
||||
|
Loading…
x
Reference in New Issue
Block a user