Merge pull request #3343 from yuwenma/add-on-requirements

chore: turn on readOnlyRootFilesystem for GKE add-on release'
GoogleCloudPlatform · Dec 10, 2024 · dd2d99c · dd2d99c
2 parents ba31a92 + 52fe321
commit dd2d99c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/operator/config/gke-addon/manager_patch.yaml b/operator/config/gke-addon/manager_patch.yaml
@@ -29,4 +29,7 @@
   value:
     postStart:
       exec:
-        command: ["./gke_addon_poststart"]
+        command: ["./gke_addon_poststart"]
+- op: add
+  path: /spec/template/spec/containers/0/securityContext/readOnlyRootFilesystem
+  value: true