mount volumes for tmp directories, apply best practice to sc

currently trying to ways of creating tmp volumes for /app/tmp and /tmp respectively to allow for read-only root file systems emptyDir epheremal volume

At least on minikube both have problems with wrong permissions (world write access without sticky bit) which makes it unusable because Ruby will complain with the following.

irb(main):001:0> Dir.tmpdir
system temporary path is world-writable: /tmp
/tmp is world-writable: /tmp
=> "/app"

Where /app is of course not writable and shouldn't be used to begin with.

I'm looking into the issue and will try to reproduce it on my OpenShift cluster. If it's an issue specific to minikube we may not have a problem.

Edit: it works fine on mz OpenShift cluster. So it might really just be a minikube bug. Will try this on another cluster to confirm, though.

opf / helm-charts

mount volumes for tmp directories, apply best practice to sc #38

🦋 Changeset detected