From 013545ab19ff83dacacceaca251764c39b1cd1c8 Mon Sep 17 00:00:00 2001 From: Fiete Ostkamp Date: Wed, 6 Mar 2024 09:45:59 +0100 Subject: [AAI] Kyverno - disallow-host-path policy - remove hostPath mounting of /etc/localtime Issue-ID: AAI-3803 Change-Id: Ia5d1bfef1581a5e3f1b2ed3869ad1f840337f969 Signed-off-by: Fiete Ostkamp --- .../aai/components/aai-schema-service/templates/deployment.yaml | 6 ------ 1 file changed, 6 deletions(-) (limited to 'kubernetes/aai/components/aai-schema-service/templates') diff --git a/kubernetes/aai/components/aai-schema-service/templates/deployment.yaml b/kubernetes/aai/components/aai-schema-service/templates/deployment.yaml index d0b81492aa..da1825ca3c 100644 --- a/kubernetes/aai/components/aai-schema-service/templates/deployment.yaml +++ b/kubernetes/aai/components/aai-schema-service/templates/deployment.yaml @@ -70,9 +70,6 @@ spec: - name: LOCAL_GROUP_ID value: {{ .Values.securityContext.group_id | quote }} volumeMounts: - - mountPath: /etc/localtime - name: localtime - readOnly: true - mountPath: /opt/app/aai-schema-service/resources/etc/appprops/aaiconfig.properties name: aaiconfig-conf subPath: aaiconfig.properties @@ -126,9 +123,6 @@ spec: - name: aai-common-aai-auth-mount secret: secretName: aai-common-aai-auth - - name: localtime - hostPath: - path: /etc/localtime - name: logs emptyDir: {} {{ include "common.log.volumes" (dict "dot" . "configMapNamePrefix" (tpl .Values.logConfigMapNamePrefix .)) | nindent 6 }} -- cgit 1.2.3-korg