[DEVHAS-453] Fix Kube-Linter errors (#381)

Signed-off-by: John Collier <[email protected]>
redhat-appstudio · Aug 22, 2023 · 8abc319 · 8abc319
1 parent 024e46c
commit 8abc319
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 0 deletions.
diff --git a/config/default/manager_auth_proxy_patch.yaml b/config/default/manager_auth_proxy_patch.yaml
@@ -20,6 +20,16 @@ spec:
         - containerPort: 8443
           protocol: TCP
           name: https
+        securityContext:
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+        resources:
+          limits:
+            cpu: 500m
+            memory: 400Mi
+          requests:
+            cpu: 100m
+            memory: 20Mi
       - name: manager
         args:
         - "--health-probe-bind-address=:8081"

diff --git a/config/manager/manager.yaml b/config/manager/manager.yaml
@@ -22,6 +22,9 @@ spec:
       labels:
         control-plane: controller-manager
     spec:
+      volumes:
+      - name: tmp-storage
+        emptyDir: {}
       securityContext:
         runAsNonRoot: true
       containers:
@@ -34,6 +37,7 @@ spec:
         name: manager
         securityContext:
           allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
         livenessProbe:
           httpGet:
             path: /healthz
@@ -90,5 +94,9 @@ spec:
               name: feature-flag-config
               key: ENVIRONMENT
               optional: true
+        volumeMounts:
+        - name: tmp-storage
+          mountPath: /tmp
+          readOnly: false
       serviceAccountName: controller-manager
       terminationGracePeriodSeconds: 10