✨ set readOnlyRootFilesystem: true for workloads
#2018
Conversation
✅ Deploy Preview for olmv1 ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
readOnlyRootFilesystem: true for workloads
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #2018 +/- ##
==========================================
+ Coverage 69.17% 69.20% +0.02%
==========================================
Files 79 79
Lines 7037 7037
==========================================
+ Hits 4868 4870 +2
+ Misses 1887 1886 -1
+ Partials 282 281 -1
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
|
tilt shows crashlooping op-con and cat-d pods. |
Signed-off-by: Joe Lanford <joe.lanford@gmail.com>
52cee8d to
1d37c1f
Compare
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: grokspawn The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
44de6f2
into
operator-framework:main
Description
This makes our containers' root filesystems read-only, which improves security by preventing writes to the container’s base image filesystem.
It adds
/tmpas an emptyDir volume so that our app can continue writing temporary files as needed.Reviewer Checklist