diff --git a/charts/pdc-agent/Chart.yaml b/charts/pdc-agent/Chart.yaml index bd59c6c652..fb41f7bc4c 100644 --- a/charts/pdc-agent/Chart.yaml +++ b/charts/pdc-agent/Chart.yaml @@ -3,7 +3,7 @@ name: pdc-agent description: PDC agent is an agent for connecting to Grafana Private Data source Connect type: application appVersion: "0.0.45" -version: 0.0.1 +version: 0.0.2 home: https://grafana.com/docs/grafana-cloud/connect-externally-hosted/private-data-source-connect/ sources: - https://github.com/grafana/pdc-agent diff --git a/charts/pdc-agent/README.md b/charts/pdc-agent/README.md index c765919780..65d97573b7 100644 --- a/charts/pdc-agent/README.md +++ b/charts/pdc-agent/README.md @@ -38,6 +38,7 @@ PDC agent is an agent for connecting to Grafana Private Data source Connect | securityContext.allowPrivilegeEscalation | bool | `false` | | | securityContext.capabilities.drop[0] | string | `"ALL"` | | | securityContext.privileged | bool | `false` | | +| securityContext.readOnlyRootFilesystem | bool | `false` | | | securityContext.runAsNonRoot | bool | `true` | | | tokenSecretName | string | `""` | secretName Expects a secret with key `token` which contains the Access Policy token you generated | | tolerations | list | `[]` | not required, but left in as a choice | diff --git a/charts/pdc-agent/templates/deployment.yaml b/charts/pdc-agent/templates/deployment.yaml index c86cbd22fa..e740c39fec 100644 --- a/charts/pdc-agent/templates/deployment.yaml +++ b/charts/pdc-agent/templates/deployment.yaml @@ -75,6 +75,17 @@ spec: {{- range .Values.extraArgs }} - {{ . }} {{- end }} + {{- if .Values.securityContext.readOnlyRootFilesystem }} + volumeMounts: + - mountPath: /home/pdc/ + name: ssh-cache + {{- end }} + {{- if .Values.securityContext.readOnlyRootFilesystem }} + volumes: + - name: ssh-cache + emptyDir: + sizeLimit: 50Mi + {{- end }} {{- with .Values.nodeSelector }} nodeSelector: {{- toYaml . | nindent 8 }} diff --git a/charts/pdc-agent/values.yaml b/charts/pdc-agent/values.yaml index 3124d9a033..0be15127ce 100644 --- a/charts/pdc-agent/values.yaml +++ b/charts/pdc-agent/values.yaml @@ -35,6 +35,7 @@ securityContext: runAsNonRoot: true privileged: false allowPrivilegeEscalation: false + readOnlyRootFilesystem: false resources: requests: