feat: Ensure container can run with readOnlyRootFilesystem

2 years ago · afb3a542cc
parent 4e2863faa7
commit afb3a542cc
1 changed files with 9 additions and 0 deletions
--- a/charts/planka/templates/deployment.yaml
+++ b/charts/planka/templates/deployment.yaml
@ -55,6 +55,11 @@ spec:
            - mountPath: /app/private/attachments
              subPath: attachments
              name: planka
+          {{- if .Values.securityContext.readOnlyRootFilesystem }}
+            - mountPath: /app/logs
+              subPath: app-logs
+              name: emptydir
+          {{- end }}
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
          env:
@ -139,3 +144,7 @@ spec:
    {{- else }}
          emptyDir: {}
    {{- end }}
+    {{- if .Values.securityContext.readOnlyRootFilesystem }}
+        - name: emptydir
+          emptyDir: {}
+     {{- end }}