Change socket mounts for more control (readonly)

pods like oidc mount more then one of these sockets, now we can control readonly vs non readonly better Signed-off-by: Marco Franssen <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:01 +01:00
parent f2d7aa1f62
commit 4d3fb47839
9 changed files with 16 additions and 20 deletions
@@ -46,9 +46,9 @@ spec:
            - containerPort: 443
              name: https
          volumeMounts:
-            - name: spire-agent-socket
-              mountPath: {{ include "spire.sockets" . }}
-              readOnly: true
+            - name: spire-oidc-sockets
+              mountPath: /run/spire/oidc-sockets
+              readOnly: false
            - name: spire-oidc-config
              mountPath: /run/spire/oidc/config/
              readOnly: true
@@ -64,9 +64,9 @@ spec:
          resources:
            {{- toYaml .Values.resources | nindent 12 }}
      volumes:
-        - name: spire-agent-socket
+        - name: spire-oidc-sockets
          hostPath:
-            path: /run/spire/sockets
+            path: /run/spire/oidc-sockets
            type: DirectoryOrCreate
        - name: spire-oidc-config
          configMap: