Bitnami/charts
2
0
Fork 0
mirror of https://github.com/bitnami/charts.git synced 2026-03-15 06:47:24 +08:00
Code Issues Packages Projects Releases Wiki Activity

mount root fs r/o

Browse Source
This commit is contained in:
David J. M. Karlsen
2019-12-09 23:16:32 +01:00
parent 8b31adcc1c
commit 41d29c2daa
4 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
bitnami/memcached/templates/deployment.yaml
View File

@@ -68,6 +68,10 @@ spec:
{{- if .Values.resources }} {{- if .Values.resources }}
resources: {{- toYaml .Values.resources | nindent 12 }} resources: {{- toYaml .Values.resources | nindent 12 }}
{{- end }} {{- end }}
{{- if .Values.securityContext.enabled }}
securityContext:
readOnlyRootFilesystem: {{ .Values.securityContext.readOnlyRootFilesystem }}
{{- end }}
{{- if .Values.metrics.enabled }} {{- if .Values.metrics.enabled }}
- name: metrics - name: metrics
image: {{ template "memcached.metrics.image" . }} image: {{ template "memcached.metrics.image" . }}

4
bitnami/memcached/templates/statefulset.yaml
View File

@@ -72,6 +72,10 @@ spec:
{{- if .Values.resources }} {{- if .Values.resources }}
resources: {{- toYaml .Values.resources | nindent 12 }} resources: {{- toYaml .Values.resources | nindent 12 }}
{{- end }} {{- end }}
{{- if .Values.securityContext.enabled }}
securityContext:
readOnlyRootFilesystem: {{ .Values.securityContext.readOnlyRootFilesystem }}
{{- end }}
{{- if .Values.persistence.enabled }} {{- if .Values.persistence.enabled }}
volumeMounts: volumeMounts:
- name: pv-data - name: pv-data

1
bitnami/memcached/values-production.yaml
View File

@@ -98,6 +98,7 @@ securityContext:
enabled: true enabled: true
fsGroup: 1001 fsGroup: 1001
runAsUser: 1001 runAsUser: 1001
readOnlyRootFilesystem: true
## Pod annotations ## Pod annotations
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/

1
bitnami/memcached/values.yaml
View File

@@ -98,6 +98,7 @@ securityContext:
enabled: true enabled: true
fsGroup: 1001 fsGroup: 1001
runAsUser: 1001 runAsUser: 1001
readOnlyRootFilesystem: true
## Pod annotations ## Pod annotations
## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ ## ref: https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/