Some of the `securityContext` settings need to be on the container, not on the pod, including the read-only file system, which was not previously enabled. This now enables the read-only file system. Also map the crawler /tmp directory to use the same volume as crawls (as crawler currently uses /tmp dir) as /tmp becomes read-only otherwise. |
||
|---|---|---|
| .. | ||
| background_job.yaml | ||
| crawl_configmap.yaml | ||
| crawl_cron_job.yaml | ||
| crawl_job.yaml | ||
| crawler.yaml | ||
| profile_job.yaml | ||
| profilebrowser.yaml | ||
| qa_configmap.yaml | ||
| redis.yaml | ||
| replica_deletion_cron_job.yaml | ||
| replica_job.yaml | ||