mirror of https://github.com/linkerd/linkerd2.git
535e533510
Increase container security by making the root file system of the cni install plugin read-only. Change the temporary directory used in the cni install script, add a writable EmptyDir volume and enable readOnlyFileSystem securityContext in cni plugin helm chart. Tested this by building the container image of the cni plugin and installed the chart onto a cluster. Logs looked the same as before this change. Fixes #6468 Signed-off-by: Gerald Pape <gerald@giantswarm.io> |
||
|---|---|---|
| .. | ||
| deployment | ||
| test | ||
| Dockerfile | ||
| main.go | ||