From 6c7f7d4505b7424f2810f5403ddf543cc2411464 Mon Sep 17 00:00:00 2001 From: Peter Kurfer Date: Mon, 29 Apr 2024 16:58:24 +0200 Subject: [PATCH] fix(umami): don't mount root FS read-only --- umami/resources/deployment.yaml | 16 ++-------------- 1 file changed, 2 insertions(+), 14 deletions(-) diff --git a/umami/resources/deployment.yaml b/umami/resources/deployment.yaml index 8e042f1..093352d 100644 --- a/umami/resources/deployment.yaml +++ b/umami/resources/deployment.yaml @@ -36,17 +36,12 @@ spec: - containerPort: 3000 protocol: TCP name: web - volumeMounts: - - name: next-cache - mountPath: /data/.next/cache - - name: node-cache - mountPath: /home/node/.cache securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL - readOnlyRootFilesystem: true + readOnlyRootFilesystem: false affinity: nodeAffinity: preferredDuringSchedulingIgnoredDuringExecution: @@ -60,11 +55,4 @@ spec: securityContext: runAsUser: 1000 runAsGroup: 1000 - runAsNonRoot: true - volumes: - - name: next-cache - emptyDir: - sizeLimit: 250Mi - - name: node-cache - emptyDir: - sizeLimit: 1500Mi \ No newline at end of file + runAsNonRoot: true \ No newline at end of file