Merge "Add readOnlyRootFilesystem to HAProxy and CoreDNS."

2018-09-07 15:23:11 +00:00 · 2018-09-07 15:23:11 +00:00 · c7bee46629
parent 9f61ead791 e84939c574
commit c7bee46629
2 changed files with 4 additions and 0 deletions
--- a/charts/haproxy/templates/daemonset.yaml
+++ b/charts/haproxy/templates/daemonset.yaml
@ -67,6 +67,8 @@ spec:
              mountPath: /tmp/etc
            - name: host
              mountPath: /host
+      securityContext:
+        readOnlyRootFilesystem: true
      volumes:
        - name: haproxy-bin
          configMap:
--- a/charts/haproxy/templates/etc/_haproxy.yaml.tpl
+++ b/charts/haproxy/templates/etc/_haproxy.yaml.tpl
@ -91,3 +91,5 @@ spec:
    - name: etc
      hostPath:
        path: {{ .Values.conf.haproxy.host_config_dir }}
+  securityContext:
+    readOnlyRootFilesystem: true