components/*: Forbid write access to root filesystem

Signed-off-by: GitHub <noreply@github.com>
2022-01-27 09:13:18 +00:00
parent 48b2bb6a72
commit 57c46a2861
13 changed files with 33 additions and 5 deletions
--- a/manifests/blackboxExporter-deployment.yaml
+++ b/manifests/blackboxExporter-deployment.yaml
@@ -43,6 +43,7 @@ spec:
            memory: 20Mi
        securityContext:
          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
          runAsNonRoot: true
          runAsUser: 65534
        volumeMounts:
@@ -63,6 +64,7 @@ spec:
            memory: 20Mi
        securityContext:
          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
          runAsNonRoot: true
          runAsUser: 65534
        terminationMessagePath: /dev/termination-log
@@ -90,6 +92,7 @@ spec:
            memory: 20Mi
        securityContext:
          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
          runAsGroup: 65532
          runAsNonRoot: true
          runAsUser: 65532