search

metal-stack / helm-charts

Contains metal-stack Helm charts
MIT License
2 stars 10 forks source link

Set readOnlyRootFilesystem: true for all containers #67

Closed timp87 closed 1 month ago

timp87 commented 1 year ago

Hardcode readOnlyRootFilesystem set to true for all containers as a general security measure. Host paths and volumes where rw access is needed should be mounted explicitly.

A followup of https://github.com/metal-stack/helm-charts/pull/65 and https://github.com/metal-stack/helm-charts/issues/66

timp87 commented 9 months ago

@Gerrit91 I will bump chart version in this PR, but first https://github.com/metal-stack/helm-charts/pull/65 has be be merged

timp87 commented 1 month ago

@Gerrit91 I've bumped chart version in Chart.yaml