Merge pull request #437 from stlaz/writable_workload_fs

Bug 1942725: explicitly allow apiserver pods to write to their root FS
openshift · Apr 15, 2021 · d34feb3 · d34feb3
2 parents 883b6ee + aa92611
commit d34feb3
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/bindata/v3.11.0/openshift-apiserver/deploy.yaml b/bindata/v3.11.0/openshift-apiserver/deploy.yaml
@@ -85,6 +85,7 @@ spec:
         # we need to set this to privileged to be able to write audit to /var/log/openshift-apiserver
         securityContext:
           privileged: true
+          readOnlyRootFilesystem: false
         ports:
         - containerPort: 8443
         volumeMounts:

diff --git a/pkg/operator/v311_00_assets/bindata.go b/pkg/operator/v311_00_assets/bindata.go