[#1033] Mount manager container's root filesystem as read-only

artemiscloud · Oct 15, 2024 · 6a14d81 · 6a14d81
1 parent 0a135d5
commit 6a14d81
Show file tree

Hide file tree

Showing 4 changed files with 4 additions and 0 deletions.
diff --git a/bundle/manifests/activemq-artemis-operator.clusterserviceversion.yaml b/bundle/manifests/activemq-artemis-operator.clusterserviceversion.yaml
@@ -2938,6 +2938,7 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  readOnlyRootFilesystem: true
                   runAsNonRoot: true
                   seccompProfile:
                     type: RuntimeDefault

diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -74,6 +74,7 @@ spec:
           capabilities:
             drop:
             - ALL
+          readOnlyRootFilesystem: true
           runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault

diff --git a/deploy/activemq-artemis-operator.yaml b/deploy/activemq-artemis-operator.yaml
@@ -6964,6 +6964,7 @@ spec:
           capabilities:
             drop:
             - ALL
+          readOnlyRootFilesystem: true
           runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault

diff --git a/deploy/operator.yaml b/deploy/operator.yaml
@@ -154,6 +154,7 @@ spec:
           capabilities:
             drop:
             - ALL
+          readOnlyRootFilesystem: true
           runAsNonRoot: true
           seccompProfile:
             type: RuntimeDefault