airship
/
promenade
Code Issues Proposed changes

Merge "Add readOnlyRootFilesystem to HAProxy and CoreDNS."

This commit is contained in:
Zuul 2018-09-07 15:23:11 +00:00 committed by Gerrit Code Review
parent 9f61ead791 e84939c574
commit c7bee46629
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
charts/haproxy/templates/daemonset.yaml
View File

@ -67,6 +67,8 @@ spec:
mountPath: /tmp/etc mountPath: /tmp/etc
- name: host - name: host
mountPath: /host mountPath: /host
securityContext:
readOnlyRootFilesystem: true
volumes: volumes:
- name: haproxy-bin - name: haproxy-bin
configMap: configMap:

2
charts/haproxy/templates/etc/_haproxy.yaml.tpl
View File

@ -91,3 +91,5 @@ spec:
- name: etc - name: etc
hostPath: hostPath:
path: {{ .Values.conf.haproxy.host_config_dir }} path: {{ .Values.conf.haproxy.host_config_dir }}
securityContext:
readOnlyRootFilesystem: true