(chore) also use s6 readonlyroot mitigation when running asNonRoot

2026-07-10 09:34:03 -03:00 · 2021-09-26 11:20:08 +02:00
parent 4076def32a
commit 842cf0a65f
2 changed files with 2 additions and 2 deletions
--- a/charts/library/common/Chart.yaml
+++ b/charts/library/common/Chart.yaml
@@ -15,4 +15,4 @@ maintainers:
 name: common
 sources: null
 type: library
-version: 8.0.4
+version: 8.0.5
--- a/charts/library/common/templates/lib/controller/_container.tpl
+++ b/charts/library/common/templates/lib/controller/_container.tpl
@@ -35,7 +35,7 @@
  {{- end }}

  env:
-   {{- if .Values.securityContext.readOnlyRootFilesystem }}
+   {{- if or ( .Values.securityContext.readOnlyRootFilesystem ) ( .Values.securityContext.runAsNonRoot ) }}
    - name: S6_READ_ONLY_ROOT
      value: "1"
   {{- end }}