diff --git a/charts/spire/charts/tornjak-frontend/templates/deployment.yaml b/charts/spire/charts/tornjak-frontend/templates/deployment.yaml index a1c4f42..8fbf210 100644 --- a/charts/spire/charts/tornjak-frontend/templates/deployment.yaml +++ b/charts/spire/charts/tornjak-frontend/templates/deployment.yaml @@ -56,6 +56,8 @@ spec: mountPath: {{ .Values.workingDir }}/node_modules/.cache - name: env mountPath: {{ .Values.workingDir }}/build/tmp + - name: logs + mountPath: /opt/app-root/src/.npm/ {{- with .Values.nodeSelector }} nodeSelector: {{- toYaml . | nindent 8 }} @@ -77,3 +79,5 @@ spec: emptyDir: {} - name: env emptyDir: {} + - name: logs + emptyDir: {} diff --git a/examples/production/values.yaml b/examples/production/values.yaml index bd1aa18..dd6fb4e 100644 --- a/examples/production/values.yaml +++ b/examples/production/values.yaml @@ -124,7 +124,7 @@ tornjak-frontend: securityContext: allowPrivilegeEscalation: false runAsNonRoot: true - readOnlyRootFilesystem: false + readOnlyRootFilesystem: true capabilities: drop: [ALL] seccompProfile: