From d49aed6bac24595b8cd0989f234c91275b342c9b Mon Sep 17 00:00:00 2001 From: Corey Daley Date: Wed, 12 Feb 2025 21:23:35 -0500 Subject: [PATCH] chore: enable readOnlyRootFilesystem by default on backend container --- charts/backstage/Chart.yaml | 2 +- charts/backstage/README.md | 2 +- charts/backstage/values.yaml | 1 + 3 files changed, 3 insertions(+), 2 deletions(-) diff --git a/charts/backstage/Chart.yaml b/charts/backstage/Chart.yaml index 2fd75ef1..5694b722 100644 --- a/charts/backstage/Chart.yaml +++ b/charts/backstage/Chart.yaml @@ -44,4 +44,4 @@ sources: # This is the chart version. This version number should be incremented each time you make changes # to the chart and its templates, including the app version. # Versions are expected to follow Semantic Versioning (https://semver.org/) -version: 3.0.3 +version: 3.1.0 diff --git a/charts/backstage/README.md b/charts/backstage/README.md index f1c0df8b..d94b0a9c 100644 --- a/charts/backstage/README.md +++ b/charts/backstage/README.md @@ -2,7 +2,7 @@ # RHDH Backstage Helm Chart for OpenShift (Community Version) [![Artifact Hub](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/rhdh-chart&style=flat-square)](https://artifacthub.io/packages/search?repo=rhdh-chart) -![Version: 3.0.3](https://img.shields.io/badge/Version-3.0.3-informational?style=flat-square) +![Version: 3.1.0](https://img.shields.io/badge/Version-3.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) A Helm chart for deploying Red Hat Developer Hub. diff --git a/charts/backstage/values.yaml b/charts/backstage/values.yaml index a7c2ca3d..403b5a93 100644 --- a/charts/backstage/values.yaml +++ b/charts/backstage/values.yaml @@ -67,6 +67,7 @@ upstream: subject: legacy-default-config secret: ${BACKEND_SECRET} containerSecurityContext: + readOnlyRootFilesystem: true allowPrivilegeEscalation: false capabilities: drop: ["ALL"]