change pgbackrest jobs to readOnlyRootFilesystem:true

Schmaetz · Schmaetz · commit b8f098e34d85 · 2025-09-05T10:38:02.000+02:00
diff --git a/pkg/cluster/k8sres.go b/pkg/cluster/k8sres.go
@@ -3327,6 +3327,9 @@ func (c *Cluster) generatePgbackrestJob(backup *cpov1.Pgbackrest, repo *cpov1.Re
 		nil,
 	)
 
+	// Patch securityContext - readOnlyRootFilesystem
+	pgbackrestContainer.SecurityContext.ReadOnlyRootFilesystem = util.True()
+
 	podAffinityTerm := v1.PodAffinityTerm{
 		LabelSelector: c.roleLabelsSelector(Master),
 		TopologyKey:   "kubernetes.io/hostname",

Original file line number	Diff line number	Diff line change
`@@ -3327,6 +3327,9 @@ func (c Cluster) generatePgbackrestJob(backup cpov1.Pgbackrest, repo *cpov1.Re`
`3327`	`3327`	`nil,`
`3328`	`3328`	`)`
`3329`	`3329`
	`3330`	`+ // Patch securityContext - readOnlyRootFilesystem`
	`3331`	`+ pgbackrestContainer.SecurityContext.ReadOnlyRootFilesystem = util.True()`
	`3332`	`+`
`3330`	`3333`	`podAffinityTerm := v1.PodAffinityTerm{`
`3331`	`3334`	`LabelSelector: c.roleLabelsSelector(Master),`
`3332`	`3335`	`TopologyKey: "kubernetes.io/hostname",`