feat: Ability to run with read-only root filesystem in Helm (#695)

2024-04-10 12:56:21 +02:00
parent 4fe77c305c
commit 758c2c3494
2 changed files with 10 additions and 1 deletions
@@ -55,6 +55,11 @@ spec:
            - mountPath: /app/private/attachments
              subPath: attachments
              name: planka
+          {{- if .Values.securityContext.readOnlyRootFilesystem }}
+            - mountPath: /app/logs
+              subPath: app-logs
+              name: emptydir
+          {{- end }}
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
          env:
@@ -139,3 +144,7 @@ spec:
    {{- else }}
          emptyDir: {}
    {{- end }}
+    {{- if .Values.securityContext.readOnlyRootFilesystem }}
+        - name: emptydir
+          emptyDir: {}
+     {{- end }}