Add readonlyRootFilesystem to container_definition (#64)

maordavidov · web-flow · commit 65873d079296 · 2023-01-31T15:58:03.000Z
Add readonlyRootFilesystem

Co-authored-by: Maor Davidov &lt;maor@dcode.tech&gt;
diff --git a/main.tf b/main.tf
@@ -256,7 +256,8 @@ resource "aws_ecs_task_definition" "task" {
   "pseudoTerminal": ${var.task_pseudo_terminal},
   %{~endif}
   "environment": ${jsonencode(local.task_environment)},
-  "environmentFiles": ${jsonencode(local.task_environment_files)}
+  "environmentFiles": ${jsonencode(local.task_environment_files)},
+  "readonlyRootFilesystem": ${var.readonlyRootFilesystem ? true : false}
 }]
 EOF
 
diff --git a/variables.tf b/variables.tf
@@ -333,3 +333,8 @@ variable "cpu_architecture" {
   default     = "X86_64"
   type        = string
 }
+
+variable "readonlyRootFilesystem" {
+  default     = false
+  description = "When this parameter is true, the container is given read-only access to its root file system"
+}

Original file line number	Diff line number	Diff line change
`@@ -333,3 +333,8 @@ variable "cpu_architecture" {`
`333`	`333`	`default = "X86_64"`
`334`	`334`	`type = string`
`335`	`335`	`}`
	`336`	`+`
	`337`	`+variable "readonlyRootFilesystem" {`
	`338`	`+ default = false`
	`339`	`+ description = "When this parameter is true, the container is given read-only access to its root file system"`
	`340`	`+}`