Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create/Run repository maintenance jobs with read-only root filesystem #638

Open
revog opened this issue Jan 15, 2025 · 0 comments
Open

Create/Run repository maintenance jobs with read-only root filesystem #638

revog opened this issue Jan 15, 2025 · 0 comments

Comments

@revog
Copy link

revog commented Jan 15, 2025

Describe the problem/challenge you have
Due to security/policy reasons we'd like to run the maintenance jobs with read-only root filesystem

Describe the solution you'd like
Looking for an option in the helm deployment to set the following in the maintenance pod/job:

...
containerSecurityContext:
  readOnlyRootFilesystem: true
...

Anything else you would like to add:
For other components (velero server, node-agents, crd job) it is possible to set the option above within the values.yaml.

Environment:

  • helm version (use helm version): 3.12.0
  • helm chart version and app version (use helm list -n <YOUR NAMESPACE>): 8.1.0
  • Kubernetes version (use kubectl version): v1.31.1
  • Kubernetes installer & version: RKE2
  • Cloud provider or hardware configuration:
  • OS (e.g. from /etc/os-release): SLES15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant