Skip to content
This repository was archived by the owner on Jan 29, 2025. It is now read-only.

Commit 9f0c9ea

Browse files
togashidmkillianmuldoon
authored andcommitted
Add security context for the mount container
Mount container's root file system set as read-only in the deployment file.
1 parent 65291eb commit 9f0c9ea

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

deploy/tas-deployment.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,9 @@ spec:
3030
- --key=/tas/cert/tls.key
3131
- --cacert=/var/run/secrets/kubernetes.io/serviceaccount/ca.crt
3232
image: tas-extender
33-
imagePullPolicy: IfNotPresent
33+
imagePullPolicy: IfNotPresent
34+
securityContext:
35+
readOnlyRootFilesystem: true
3436
volumeMounts:
3537
- name: certs
3638
mountPath: /tas/cert

0 commit comments

Comments
 (0)