Merge branch 'main' into ci-images-build-pipeline-refactor

FlowFuse · Mar 6, 2024 · c283cac · c283cac
2 parents 864a171 + bc82d87
commit c283cac
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/helm/flowforge/templates/deployment.yaml b/helm/flowforge/templates/deployment.yaml
@@ -40,6 +40,7 @@ spec:
           - name: configdir
             mountPath: /config
         securityContext:
+          readOnlyRootFilesystem: true
           capabilities:
             drop:
               - ALL

diff --git a/helm/flowforge/templates/file-storage.yml b/helm/flowforge/templates/file-storage.yml
@@ -56,6 +56,11 @@ spec:
               secretKeyRef:
                 name: {{ include "forge.applicationSecretName" . }}
                 key: password
+        securityContext:
+          readOnlyRootFilesystem: true
+          capabilities:
+            drop:
+              - ALL
       containers:
       - name: file-storage
         {{- if .Values.forge.fileStore.image }}