fix: Check: CKV_K8S_22: "Use read-only filesystem for containers wher…

…e possible"
regel · Jan 4, 2023 · 107d761 · 107d761
1 parent 4e329b6
commit 107d761
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/charts/cardano/Chart.yaml b/charts/cardano/Chart.yaml
@@ -4,7 +4,7 @@ description: A Cardano Helm chart for Kubernetes
 
 type: application
 
-version: 0.4.0
+version: 0.4.1
 
 appVersion: 1.35.4
 

diff --git a/charts/cardano/templates/producer-statefulset.yaml b/charts/cardano/templates/producer-statefulset.yaml
@@ -107,6 +107,7 @@ spec:
           securityContext:
             runAsNonRoot: false
             runAsUser: 0
+            readOnlyRootFilesystem: true
           image: "{{- .Values.busybox.repository -}}:{{- .Values.busybox.tag -}}"
           imagePullPolicy: {{ .Values.busybox.pullPolicy }}
           command: ["sh", "-c"]