genpolicy: support readonly emptyDir mount

Set emptyDir access based on volume mount readOnly value

Signed-off-by: Saul Paredes <saulparedes@microsoft.com>
This commit is contained in:
Saul Paredes
2024-09-03 19:09:13 -07:00
parent 36a4104753
commit 24c2d13fd3
2 changed files with 12 additions and 1 deletions

View File

@@ -27,6 +27,9 @@ spec:
volumeMounts:
- name: host-empty-vol
mountPath: "/host/cache"
- name: host-empty-vol
mountPath: "/host/cache-read-only"
readOnly: true
- mountPath: /tmp/results
name: hostpath-vol
- mountPath: /tmp/results-read-only