Some of the `securityContext` settings need to be on the container, not on the pod, including the read-only file system, which was not previously enabled. This now enables the read-only file system. Also map the crawler /tmp directory to use the same volume as crawls (as crawler currently uses /tmp dir) as /tmp becomes read-only otherwise. |
||
---|---|---|
.. | ||
background_job.yaml | ||
crawl_configmap.yaml | ||
crawl_cron_job.yaml | ||
crawl_job.yaml | ||
crawler.yaml | ||
profile_job.yaml | ||
profilebrowser.yaml | ||
qa_configmap.yaml | ||
redis.yaml | ||
replica_deletion_cron_job.yaml | ||
replica_job.yaml |