updated readonly on all files

OasisLMF · Jan 10, 2024 · 534c45d · 534c45d
1 parent 3f67d40
commit 534c45d
Show file tree

Hide file tree

Showing 6 changed files with 12 additions and 2 deletions.
diff --git a/kubernetes/charts/oasis-models/templates/workers.yaml b/kubernetes/charts/oasis-models/templates/workers.yaml
@@ -33,8 +33,8 @@ spec:
       containers:
         - image: {{ .image }}:{{ .version }}
           {{- if .imagePullPolicy }}
-          securityContext:
-            readOnlyRootFilesystem: true
+          # securityContext:
+          #   readOnlyRootFilesystem: true
           imagePullPolicy: {{ .imagePullPolicy }}
           {{- end }}
           name: worker

diff --git a/kubernetes/charts/oasis-monitoring/templates/flower.yaml b/kubernetes/charts/oasis-monitoring/templates/flower.yaml
@@ -25,6 +25,8 @@ spec:
       containers:
         - name: flower
           image: {{ .Values.monitoringImages.flower.image }}:{{- .Values.monitoringImages.flower.version }}
+          securityContext:
+            readOnlyRootFilesystem: true
           imagePullPolicy: IfNotPresent
           command: [ "celery" ]
           args: [ "flower", "--broker_api=http://guest:guest@broker:6379" ]

diff --git a/kubernetes/charts/oasis-platform/templates/keycloak.yaml b/kubernetes/charts/oasis-platform/templates/keycloak.yaml
@@ -94,6 +94,8 @@ spec:
       containers:
         - name: {{ .Values.keycloak.name }}
           image: {{ .Values.images.keycloak.image }}:{{ .Values.images.keycloak.version }}
+          securityContext:
+            readOnlyRootFilesystem: true
           args: [
             "start-dev", 
             "--import-realm",

diff --git a/kubernetes/charts/oasis-platform/templates/oasis.yaml b/kubernetes/charts/oasis-platform/templates/oasis.yaml
@@ -202,6 +202,8 @@ spec:
         {{- include "h.initTcpAvailabilityCheckBySecret" (list . .Values.databases.oasis_db.name .Values.databases.celery_db.name .Values.databases.channel_layer.name) | nindent 8}}
       containers:
         - image: {{ .Values.images.oasis.platform.image }}:{{ .Values.images.oasis.platform.version }}
+          securityContext:
+            readOnlyRootFilesystem: true
           imagePullPolicy: {{ .Values.images.oasis.platform.imagePullPolicy }}
           name: celery-beat
           command: ["celery", "-A", "src.server.oasisapi.celery_app", "beat", "--loglevel=DEBUG"]

diff --git a/kubernetes/charts/oasis-platform/templates/oasis_server.yaml b/kubernetes/charts/oasis-platform/templates/oasis_server.yaml
@@ -82,6 +82,8 @@ spec:
         {{- include "h.initTcpAvailabilityCheckBySecret" (list . .Values.databases.oasis_db.name .Values.databases.celery_db.name .Values.keycloak.name .Values.databases.broker.name) | nindent 8}}
       containers:
         - image: {{ .Values.images.oasis.platform.image }}:{{ .Values.images.oasis.platform.version }}
+          securityContext:
+            readOnlyRootFilesystem: true
           name: {{ .Values.oasisWebsocket.name }}
           imagePullPolicy: {{ .Values.images.oasis.platform.imagePullPolicy }}
           env:

diff --git a/kubernetes/charts/oasis-platform/templates/oasis_worker_controller.yaml b/kubernetes/charts/oasis-platform/templates/oasis_worker_controller.yaml
@@ -57,6 +57,8 @@ spec:
       {{- include "h.initTcpAvailabilityCheckBySecret" (list . .Values.oasisWebsocket.name) | nindent 8}}
       containers:
         - image: {{ .Values.images.oasis.worker_controller.image }}:{{ .Values.images.oasis.worker_controller.version }}
+        securityContext:
+          readOnlyRootFilesystem: true
           imagePullPolicy: {{ .Values.images.oasis.worker_controller.imagePullPolicy }}
           name: main
           env: