Merge pull request #243 from jkyros/fix-writeable-root-fs

Set "readOnlyRootFilesystem: true" in operator pod template to match operand
kedacore · Aug 12, 2024 · b821d94 · b821d94
2 parents 6efa716 + ce97bbe
commit b821d94
Show file tree

Hide file tree

Showing 5 changed files with 6 additions and 1 deletion.
diff --git a/bundle/manifests/keda.clusterserviceversion.yaml b/bundle/manifests/keda.clusterserviceversion.yaml
@@ -138,7 +138,7 @@ metadata:
     categories: Cloud Provider
     certified: "false"
     containerImage: ghcr.io/kedacore/keda-olm-operator:2.15.0
-    createdAt: "2024-08-09T21:40:07Z"
+    createdAt: "2024-08-12T20:57:13Z"
     description: Operator that provides KEDA, a Kubernetes-based event driver autoscaler
     operatorframework.io/suggested-namespace: keda
     operators.operatorframework.io/builder: operator-sdk-v1.31.0
@@ -655,6 +655,7 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  readOnlyRootFilesystem: true
                 volumeMounts:
                 - mountPath: /certs
                   name: certificates

diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -36,6 +36,7 @@ spec:
             capabilities:
               drop:
               - ALL
+            readOnlyRootFilesystem: true
           ports:
             - containerPort: 8080
               name: http

diff --git a/config/manifests/bases/keda.clusterserviceversion.yaml b/config/manifests/bases/keda.clusterserviceversion.yaml
@@ -652,6 +652,7 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  readOnlyRootFilesystem: true
                 volumeMounts:
                 - mountPath: /certs
                   name: certificates

diff --git a/keda/2.14.1/manifests/keda.v2.14.1.clusterserviceversion.yaml b/keda/2.14.1/manifests/keda.v2.14.1.clusterserviceversion.yaml
@@ -630,6 +630,7 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  readOnlyRootFilesystem: true
                 volumeMounts:
                 - mountPath: /certs
                   name: certificates

diff --git a/keda/2.15.0/manifests/keda.v2.15.0.clusterserviceversion.yaml b/keda/2.15.0/manifests/keda.v2.15.0.clusterserviceversion.yaml
@@ -652,6 +652,7 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  readOnlyRootFilesystem: true
                 volumeMounts:
                 - mountPath: /certs
                   name: certificates