aboutsummaryrefslogtreecommitdiffstats
path: root/kubernetes
diff options
context:
space:
mode:
Diffstat (limited to 'kubernetes')
-rw-r--r--kubernetes/common/common/Chart.yaml2
-rw-r--r--kubernetes/common/common/templates/_mariadb.tpl6
2 files changed, 2 insertions, 6 deletions
diff --git a/kubernetes/common/common/Chart.yaml b/kubernetes/common/common/Chart.yaml
index 591f24f4ee..6fce57f83b 100644
--- a/kubernetes/common/common/Chart.yaml
+++ b/kubernetes/common/common/Chart.yaml
@@ -17,4 +17,4 @@
apiVersion: v2
description: Common templates for inclusion in other charts
name: common
-version: 13.2.10
+version: 13.2.11
diff --git a/kubernetes/common/common/templates/_mariadb.tpl b/kubernetes/common/common/templates/_mariadb.tpl
index 0e46e5ef26..c1447cd0ac 100644
--- a/kubernetes/common/common/templates/_mariadb.tpl
+++ b/kubernetes/common/common/templates/_mariadb.tpl
@@ -312,6 +312,7 @@ spec:
authDelegatorRoleName: {{ $dbinst }}-auth
gracefulShutdownTimeout: 5s
securityContext:
+ readOnlyFileSystem: true
allowPrivilegeEscalation: false
capabilities:
drop:
@@ -320,11 +321,8 @@ spec:
privileged: false
runAsNonRoot: true
runAsUser: 10001
- seccompProfile:
- type: RuntimeDefault
primary:
automaticFailover: true
- podIndex: 0
recovery:
enabled: true
clusterHealthyTimeout: 30s
@@ -344,8 +342,6 @@ spec:
privileged: false
runAsNonRoot: true
runAsUser: 10001
- seccompProfile:
- type: RuntimeDefault
config:
reuseStorageVolume: false
volumeClaimTemplate: