Make gpkgs explicitly readonly

Author: gerdos82

internal/controller/blobdownload/gpkg_download.sh

@@ -103,6 +103,8 @@ function download() {
         echo "No hash found for $file in blob storage, skipping checksum."
     fi
 
+    # After successful download set the GPKG to readonly
+    chmod -wx $file
     echo "done"
 }
 

internal/controller/test_data/wfs/complete/expected/configmap-init-scripts.yaml

@@ -179,7 +179,7 @@ metadata:
     service-type: wfs
     service-version: v1_0
     theme: theme
-  name: complete-wfs-init-scripts-fft29bbtdd
+  name: complete-wfs-init-scripts-f8k8ffgmgh
   namespace: default
   ownerReferences:
     - apiVersion: pdok.nl/v3

internal/controller/test_data/wfs/complete/expected/deployment.yaml

@@ -258,7 +258,7 @@ spec:
           name: mapserver
         - configMap:
             defaultMode: 511
-            name: complete-wfs-init-scripts-fft29bbtdd
+            name: complete-wfs-init-scripts-f8k8ffgmgh
           name: init-scripts
         - configMap:
             name: complete-wfs-capabilities-generator-mfbh8cgh5c

internal/controller/test_data/wfs/minimal/expected/configmap-init-scripts.yaml

@@ -11,7 +11,7 @@ metadata:
     pdok.nl/inspire: 'false'
     service-type: wfs
     service-version: v1_0
-  name: minimal-wfs-init-scripts-fft29bbtdd
+  name: minimal-wfs-init-scripts-f8k8ffgmgh
   namespace: default
   ownerReferences:
     - apiVersion: pdok.nl/v3

internal/controller/test_data/wfs/minimal/expected/deployment.yaml

@@ -241,7 +241,7 @@ spec:
           name: mapserver
         - configMap:
             defaultMode: 511
-            name: minimal-wfs-init-scripts-fft29bbtdd
+            name: minimal-wfs-init-scripts-f8k8ffgmgh
           name: init-scripts
         - configMap:
             name: minimal-wfs-capabilities-generator-m46924mtk7

internal/controller/test_data/wms/complete/expected/configmap-init-scripts.yaml

@@ -179,7 +179,7 @@ metadata:
     service-type: wms
     service-version: v1_0
     theme: "2016"
-  name: complete-wms-init-scripts-fft29bbtdd
+  name: complete-wms-init-scripts-f8k8ffgmgh
   namespace: default
   ownerReferences:
     - apiVersion: pdok.nl/v3

internal/controller/test_data/wms/complete/expected/deployment.yaml

@@ -375,7 +375,7 @@ spec:
           name: ogc-webservice-proxy-config
         - configMap:
             defaultMode: 511
-            name: complete-wms-init-scripts-fft29bbtdd
+            name: complete-wms-init-scripts-f8k8ffgmgh
           name: init-scripts
         - configMap:
             name: complete-wms-capabilities-generator-b9kmb96877

internal/controller/test_data/wms/custom-mapfile/expected/configmap-init-scripts.yaml

@@ -178,7 +178,7 @@ metadata:
     pdok.nl/inspire: "false"
     service-type: wms
     service-version: v1_0
-  name: custom-mapfile-wms-init-scripts-fft29bbtdd
+  name: custom-mapfile-wms-init-scripts-f8k8ffgmgh
   namespace: default
   ownerReferences:
     - apiVersion: pdok.nl/v3

internal/controller/test_data/wms/custom-mapfile/expected/deployment.yaml

@@ -325,7 +325,7 @@ spec:
           name: ogc-webservice-proxy-config
         - configMap:
             defaultMode: 511
-            name: custom-mapfile-wms-init-scripts-fft29bbtdd
+            name: custom-mapfile-wms-init-scripts-f8k8ffgmgh
           name: init-scripts
         - configMap:
             name: custom-mapfile-wms-capabilities-generator-865bt77thd

internal/controller/test_data/wms/minimal/expected/configmap-init-scripts.yaml

@@ -178,7 +178,7 @@ metadata:
     pdok.nl/inspire: "false"
     service-type: wms
     service-version: v1_0
-  name: minimal-wms-init-scripts-fft29bbtdd
+  name: minimal-wms-init-scripts-f8k8ffgmgh
   namespace: default
   ownerReferences:
     - apiVersion: pdok.nl/v3