这是indexloc提供的服务,不要输入任何密码
Skip to content

readOnlyRootFilesystem to true in Kubernetes #7330

@albundy83

Description

@albundy83

Describe the solution you'd like
Hello,

it will be nice that files that are updated by entrypoint.sh file be written to a dedicated empty folder.
At least file /pgadmin4/config_distro.py.

For moment, we can't use an emptyDir or persistentVolumeClaim as there are many files in /pgadmin4 folder.

I will be a nice step to achieve a more secure pgadmin4 Deployment by being capable to set readOnlyRootFilesystem to true.

A clear and concise description of what you want to happen.

Describe alternatives you've considered
Generate my self the /pgadmin4/config_distro.py as ConfigMap or Secret and mount it but we should be able to disable generation.

Specify a custom path for /pgadmin4/config_distro.py with ENV var.

A clear and concise description of any alternative solutions or features you've considered.

Additional context

Add any other context or screenshots about the feature request here.

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions