Gitjob container has writable /tmp dir

Also disable debug logging for tests, since it disables the security
context too

.github/scripts/deploy-fleet.sh

@@ -66,8 +66,7 @@ eventually helm upgrade --install fleet charts/fleet \
  $shards_settings \
  --set-string extraEnv[0].name=EXPERIMENTAL_OCI_STORAGE \
  --set-string extraEnv[0].value=true \
- --set garbageCollectionInterval=1s \
- --set debug=true --set debugLevel=1
+ --set garbageCollectionInterval=1s
 
 # wait for controller and agent rollout
 kubectl -n cattle-fleet-system rollout status deploy/fleet-controller

charts/fleet/templates/deployment_gitjob.yaml

@@ -102,6 +102,9 @@ spec:
  drop:
  - ALL
  {{- end }}
+ volumeMounts:
+ - mountPath: /tmp
+ name: tmp
  nodeSelector: {{ include "linux-node-selector" $shard.id | nindent 8 }}
 {{- if $.Values.nodeSelector }}
 {{ toYaml $.Values.nodeSelector | indent 8 }}
@@ -125,6 +128,9 @@ spec:
  runAsUser: 1000
  runAsGroup: 1000
 {{- end }}
+ volumes:
+ - name: tmp
+ emptyDir: {}
 {{- end }}
 ---
 {{- end }}