Skip to content

Commit 04fea3a

Browse files
committed
Incorporated Lindsey's comment
1 parent 7e0505d commit 04fea3a

File tree

3 files changed

+7
-6
lines changed

3 files changed

+7
-6
lines changed

assemblies/assembly-configuring-readonlyrootfilesystem.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
[id="{context}"]
44
= Configuring readOnlyRootFilesystem in {product}
55

6-
The {product} deployment consists of two containers, an `initContainer` that installs the Dynamic Plugins, and a backend container which runs the application. The `initContainer` has the `readOnlyRootFilesystem` option enabled by default. To enable this option on the backend container, you must either have permission to deploy resource through Helm or to create or update a CR for Operator-backed deployments. You can manually configure the `readOnlyRootFilesystem` option on the backend container by using the following methods:
6+
The {product} deployment consists of two containers: an `initContainer` that installs the Dynamic Plugins, and a backend container that runs the application. The `initContainer` has the `readOnlyRootFilesystem` option enabled by default. To enable this option on the backend container, you must either have permission to deploy resources through Helm or to create or update a CR for Operator-backed deployments. You can manually configure the `readOnlyRootFilesystem` option on the backend container by using the following methods:
77

88
include::modules/configuring-readonlyrootfilesystem/proc-configuring-readonlyrootfilesystem-option-in-rhdh-operator-deployment.adoc[leveloffset=+1]
99

modules/configuring-readonlyrootfilesystem/proc-configuring-readonlyrootfilesystem-option-in-rhdh-helm-chart-deployment.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
= Configuring the readOnlyRootFilesystem option in a {product} Helm chart deployment
33

44
.Procedure
5-
. When you are deploying {product-short} using the Helm chart, add the `readOnlyRootFilesystem: true` line to the `containerSecurityContext` section in your `values.yaml` file. For example:
5+
. In your 'values.yaml' file, add the `readOnlyRootFilesystem: true` line to the `containerSecurityContext` section. For example:
66
+
77
====
88
[source,yaml,subs="+attributes,+quotes"]
Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
[id="proc-configuring-readonlyrootfilesystem-option-in-rhdh-operator-deployment"]
22
= Configuring the readOnlyRootFilesystem option in a {product} Operator deployment
33

4-
When you are deploying {product-short} using the Operator, specify a `patch` for the `deployment` in your `{product-custom-resource-type}` custom resource (CR) that applies the `readOnlyRootFilesystem` option to the `securityContext` section in the {product-short} backend container.
4+
When you are deploying {product-short} using the Operator, you must specify a `patch` for the `deployment` in your `{product-custom-resource-type}` custom resource (CR) that applies the `readOnlyRootFilesystem` option to the `securityContext` section in the {product-short} backend container.
55

66
.Procedure
77

8-
. Add the `securityContext` specification in your CR. For example:
8+
. In your `{product-custom-resource-type}` CR, add the `securityContext` specification in your CR. For example:
99
+
1010
====
1111
[source,yaml,subs="+attributes,+quotes"]
@@ -17,8 +17,9 @@ spec:
1717
template:
1818
spec:
1919
containers:
20-
- name: backstage-backend
20+
- name: backstage-backend <1>
2121
securityContext:
2222
readOnlyRootFilesystem: true
2323
----
24-
====
24+
====
25+
<1> Name of the main container defined in the Operator default configuration.

0 commit comments

Comments
 (0)