From ea1b3b7f923484f225636346ad1039465daf45ff Mon Sep 17 00:00:00 2001
From: Stan M <5880433+stxm@users.noreply.github.com>
Date: Wed, 10 Apr 2024 12:56:21 +0200
Subject: [PATCH] feat: Ability to run with read-only root filesystem in Helm
 (#695)

---
 charts/planka/Chart.yaml                | 2 +-
 charts/planka/templates/deployment.yaml | 9 +++++++++
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/charts/planka/Chart.yaml b/charts/planka/Chart.yaml
index 5a6debee..470f8058 100644
--- a/charts/planka/Chart.yaml
+++ b/charts/planka/Chart.yaml
@@ -15,7 +15,7 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 0.1.23
+version: 0.1.24
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
diff --git a/charts/planka/templates/deployment.yaml b/charts/planka/templates/deployment.yaml
index 2d0d35b4..2ffe596f 100644
--- a/charts/planka/templates/deployment.yaml
+++ b/charts/planka/templates/deployment.yaml
@@ -55,6 +55,11 @@ spec:
             - mountPath: /app/private/attachments
               subPath: attachments
               name: planka
+          {{- if .Values.securityContext.readOnlyRootFilesystem }}
+            - mountPath: /app/logs
+              subPath: app-logs
+              name: emptydir
+          {{- end }}
           resources:
             {{- toYaml .Values.resources | nindent 12 }}
           env:
@@ -139,3 +144,7 @@ spec:
     {{- else }}
           emptyDir: {}
     {{- end }}
+    {{- if .Values.securityContext.readOnlyRootFilesystem }}
+        - name: emptydir
+          emptyDir: {}
+     {{- end }}