Fix read only dir (#129)

* fix read only dir * add another tmp dir * use different dif * add operator tmp dir
kyma-project · Oct 20, 2023 · 7c17741 · 7c17741
1 parent e8e7ec3
commit 7c17741
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 0 deletions.
diff --git a/charts/warden/charts/admission/templates/deployment.yaml b/charts/warden/charts/admission/templates/deployment.yaml
@@ -48,9 +48,17 @@ spec:
           volumeMounts:
             - name: config
               mountPath: {{ .Values.global.config.dir }}
+            - name: tmp-cert
+              mountPath: /tmp/k8s-webhook-server/
+            - name: notary-tmp
+              mountPath: /tmp/.notary
       volumes:
         - name: config
           configMap:
             name: {{ .Values.global.config.configmapName }}
+        - name: tmp-cert
+          emptyDir: {}
+        - name: notary-tmp
+          emptyDir: {}
       priorityClassName: {{ .Values.global.wardenPriorityClassName }}
 
diff --git a/charts/warden/charts/operator/templates/deployment.yaml b/charts/warden/charts/operator/templates/deployment.yaml
@@ -47,8 +47,12 @@ spec:
           volumeMounts:
             - name: config
               mountPath: {{ .Values.global.config.dir }}
+            - name: notary-tmp
+              mountPath: /tmp/.notary
       volumes:
         - name: config
           configMap:
             name: {{ .Values.global.config.configmapName }}
+        - name: notary-tmp
+          emptyDir: { }
       priorityClassName: {{ .Values.global.wardenPriorityClassName }}
diff --git a/charts/warden/values.yaml b/charts/warden/values.yaml
@@ -65,6 +65,7 @@ global:
     capabilities:
       drop:
         - ALL
+    readOnlyRootFilesystem: true
 
 
 #TODO: group k8s related settings under kubernetes?
-Original file line number
+Diff line change
@@ Expand Up / @@ -65,6 +65,7 @@ global: @@
         capabilities:
           drop:
             - ALL
+        readOnlyRootFilesystem: true
     #TODO: group k8s related settings under kubernetes?
@@ Expand Down @@