Set readOnly on consuming containers for authz/n (helm#11759)

Signed-off-by: Jeff Bachtel <[email protected]>
agolo · Feb 27, 2019 · f5b7f44 · f5b7f44
1 parent 71530eb
commit f5b7f44
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/stable/opa/Chart.yaml b/stable/opa/Chart.yaml
@@ -6,7 +6,7 @@ keywords:
 - opa
 - admission control
 - policy
-version: 0.4.0
+version: 0.5.0
 home: https://www.openpolicyagent.org
 icon: https://raw.githubusercontent.com/open-policy-agent/opa/master/logo/logo.png
 sources:

diff --git a/stable/opa/templates/deployment.yaml b/stable/opa/templates/deployment.yaml
@@ -66,6 +66,7 @@ spec:
               mountPath: /config
 {{- if .Values.authz.enabled }}
             - name: authz
+              readOnly: true
               mountPath: /authz
 {{- end }}
 {{- if .Values.mgmt.enabled }}
@@ -92,6 +93,7 @@ spec:
 {{- if .Values.authz.enabled }}
           volumeMounts:
             - name: authz
+              readOnly: true
               mountPath: /authz
 {{- end }}
 {{- end }}