Merge pull request #447 from bci-oss/chore/trg-0-4-7-read-only

Add readOnlyRootFilesystem to securitry context
eclipse-tractusx · Jul 16, 2024 · 71dd4bc · 71dd4bc
2 parents 048d80e + f0a0b20
commit 71dd4bc
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 2 deletions.
diff --git a/charts/registry/Chart.yaml b/charts/registry/Chart.yaml
@@ -26,7 +26,7 @@ sources:
   - https://github.com/eclipse-tractusx/sldt-digital-twin-registry
 
 type: application
-version: 0.5.1
+version: 0.5.2
 appVersion: 0.5.0
 
 dependencies:

diff --git a/charts/registry/README.md b/charts/registry/README.md
@@ -1,6 +1,6 @@
 # registry
 
-![Version: 0.3.15](https://img.shields.io/badge/Version-0.3.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.3.12-M1](https://img.shields.io/badge/AppVersion-0.3.12--M1-informational?style=flat-square)
+![Version: 0.5.2](https://img.shields.io/badge/Version-0.5.2-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 0.5.0](https://img.shields.io/badge/AppVersion-0.5.0-informational?style=flat-square)
 
 **Tractus-X Digital Twin Registry Helm Chart**<br/>
 This Helm charts install the Digital Twin Registry and its dependencies.

diff --git a/charts/registry/templates/registry/registry-deployment.yaml b/charts/registry/templates/registry/registry-deployment.yaml
@@ -75,5 +75,11 @@ spec:
             {{- end }}
           resources:
 {{ .Values.registry.resources | toYaml | indent 12 }}
+          volumeMounts:
+            - mountPath: /tmp
+              name: empty-tmp
+      volumes:
+        - name: empty-tmp
+          emptyDir: {}
       imagePullSecrets:
 {{ .Values.registry.imagePullSecrets | toYaml | indent 8 }}
diff --git a/charts/registry/values.yaml b/charts/registry/values.yaml
@@ -99,6 +99,7 @@ registry:
   securityContext:
     runAsUser: 100
     allowPrivilegeEscalation: false
+    readOnlyRootFilesystem: true
 
 postgresql:
   primary: