mount root fs r/o

2026-03-01 06:58:20 +08:00 · 2019-12-09 23:16:32 +01:00
parent 8b31adcc1c
commit 41d29c2daa
4 changed files with 10 additions and 0 deletions
--- a/bitnami/memcached/templates/deployment.yaml
+++ b/bitnami/memcached/templates/deployment.yaml
@@ -68,6 +68,10 @@ spec:
          {{- if .Values.resources }}
          resources: {{- toYaml .Values.resources | nindent 12 }}
          {{- end }}
+          {{- if .Values.securityContext.enabled }}
+          securityContext:
+            readOnlyRootFilesystem: {{ .Values.securityContext.readOnlyRootFilesystem }}
+          {{- end }}
        {{- if .Values.metrics.enabled }}
        - name: metrics
          image: {{ template "memcached.metrics.image" . }}
--- a/bitnami/memcached/templates/statefulset.yaml
+++ b/bitnami/memcached/templates/statefulset.yaml
@@ -72,6 +72,10 @@ spec:
          {{- if .Values.resources }}
          resources: {{- toYaml .Values.resources | nindent 12 }}
          {{- end }}
+          {{- if .Values.securityContext.enabled }}
+          securityContext:
+            readOnlyRootFilesystem: {{ .Values.securityContext.readOnlyRootFilesystem }}
+          {{- end }}
          {{- if .Values.persistence.enabled }}
          volumeMounts:
            - name: pv-data
--- a/bitnami/memcached/values-production.yaml
+++ b/bitnami/memcached/values-production.yaml
@@ -98,6 +98,7 @@ securityContext:
  enabled: true
  fsGroup: 1001
  runAsUser: 1001
+  readOnlyRootFilesystem: true

 ## Pod annotations
 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/
--- a/bitnami/memcached/values.yaml
+++ b/bitnami/memcached/values.yaml
@@ -98,6 +98,7 @@ securityContext:
  enabled: true
  fsGroup: 1001
  runAsUser: 1001
+  readOnlyRootFilesystem: true

 ## Pod annotations
 ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/