Change socket mounts for more control (readonly)

pods like oidc mount more then one of these sockets, now we can control readonly vs non readonly better Signed-off-by: Marco Franssen <[email protected]> Signed-off-by: Marco Franssen <[email protected]>
2023-02-18 13:04:01 +01:00
parent f2d7aa1f62
commit 4d3fb47839
9 changed files with 16 additions and 20 deletions
@@ -47,7 +47,7 @@ spec:
              protocol: TCP
          volumeMounts:
            - name: spire-server-socket
-              mountPath: {{ include "spire.sockets" . }}
+              mountPath: /run/spire/server-sockets
              readOnly: false
            - name: spire-config
              mountPath: /run/spire/config
@@ -86,7 +86,7 @@ spec:
              name: registrar-port
          volumeMounts:
            - name: spire-server-socket
-              mountPath: {{ include "spire.sockets" . }}
+              mountPath: /run/spire/server-sockets
              readOnly: true
            - name: spire-workload-registrar-config
              mountPath: /run/spire/k8s-workload-registrar/config