From 380430dd51ada4def02cafcdc7733d5bccc5adce Mon Sep 17 00:00:00 2001
From: Nuwan Goonasekera <2070605+nuwang@users.noreply.github.com>
Date: Mon, 20 Dec 2021 19:29:32 +0530
Subject: [PATCH] Removed unnecessary mounts and made inputs read only

---
 galaxy/values.yaml | 14 +++++---------
 1 file changed, 5 insertions(+), 9 deletions(-)

diff --git a/galaxy/values.yaml b/galaxy/values.yaml
index fb569a81..fe0ef196 100644
--- a/galaxy/values.yaml
+++ b/galaxy/values.yaml
@@ -274,18 +274,14 @@ configs:
         load: galaxy.jobs.runners.kubernetes:KubernetesJobRunner
         k8s_use_service_account: true
         k8s_data_volume_claim: |-
-          {{ template "galaxy.pvcname" . -}}:{{ .Values.persistence.mountPath -}}
+          {{ template "galaxy.pvcname" . -}}:{{ .Values.persistence.mountPath -}}:r
         k8s_working_volume_claim: |-
           {{ template "galaxy.pvcname" . -}}:{{ .Values.persistence.mountPath -}}
         k8s_persistent_volume_claims: |-
-          {{ template "galaxy.pvcname" . -}}/cache:{{ .Values.persistence.mountPath -}}/cache,
-          {{- template "galaxy.pvcname" . -}}/config:{{ .Values.persistence.mountPath -}}/config,
-          {{- template "galaxy.pvcname" . -}}/deps:{{ .Values.persistence.mountPath -}}/deps,
-          {{- template "galaxy.pvcname" . -}}/object_store_cache:{{ .Values.persistence.mountPath -}}/object_store_cache,
-          {{- template "galaxy.pvcname" . -}}/tmp:{{ .Values.persistence.mountPath -}}/tmp,
-          {{- template "galaxy.pvcname" . -}}/tool-data:{{ .Values.persistence.mountPath -}}/tool-data,
-          {{- template "galaxy.pvcname" . -}}/tools:{{ .Values.persistence.mountPath -}}/tools,
-          {{- template "galaxy.pvcname" . -}}/tool_search_index:{{ .Values.persistence.mountPath -}}/tool_search_index
+          {{ template "galaxy.pvcname" . -}}/config:{{ .Values.persistence.mountPath -}}/config:r,
+          {{- template "galaxy.pvcname" . -}}/tmp:{{ .Values.persistence.mountPath -}}/tmp:rw,
+          {{- template "galaxy.pvcname" . -}}/tool-data:{{ .Values.persistence.mountPath -}}/tool-data:r,
+          {{- template "galaxy.pvcname" . -}}/tools:{{ .Values.persistence.mountPath -}}/tools:r
           {{- if .Values.cvmfs.enabled -}}
           {{- range $key, $entry := .Values.cvmfs.galaxyPersistentVolumeClaims -}}
           ,{{ template "galaxy.fullname" $ -}}-cvmfs-gxy-{{ $key }}-pvc:{{ $entry.mountPath -}}