Add readOnlyRootFilesystem to HAProxy and CoreDNS.

- Added security context readOnlyRootFilesystem as true.

Change-Id: I84ea5a17f84bebac795e7ed72a7dff530ef081bb
This commit is contained in:
Aaron Sheffield 2018-08-20 11:25:47 -05:00
parent 42c947fae6
commit e84939c574
2 changed files with 4 additions and 0 deletions

View File

@ -67,6 +67,8 @@ spec:
mountPath: /tmp/etc
- name: host
mountPath: /host
securityContext:
readOnlyRootFilesystem: true
volumes:
- name: haproxy-bin
configMap:

View File

@ -91,3 +91,5 @@ spec:
- name: etc
hostPath:
path: {{ .Values.conf.haproxy.host_config_dir }}
securityContext:
readOnlyRootFilesystem: true