mirror of
https://github.com/kata-containers/kata-containers.git
synced 2025-09-20 00:07:55 +00:00
genpolicy: support readonly hostpath
Set hostpath access based on volume mount readOnly value Signed-off-by: Saul Paredes <saulparedes@microsoft.com>
This commit is contained in:
@@ -27,6 +27,17 @@ spec:
|
||||
volumeMounts:
|
||||
- name: host-empty-vol
|
||||
mountPath: "/host/cache"
|
||||
- mountPath: /tmp/results
|
||||
name: hostpath-vol
|
||||
- mountPath: /tmp/results-read-only
|
||||
name: hostpath-vol-read-only
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: host-empty-vol
|
||||
emptyDir: {}
|
||||
- name: hostpath-vol
|
||||
hostPath:
|
||||
path: /tmp/results
|
||||
- name: hostpath-vol-read-only
|
||||
hostPath:
|
||||
path: /tmp/results-read-only
|
Reference in New Issue
Block a user