Merge pull request #243 from jkyros/fix-writeable-root-fs

Set "readOnlyRootFilesystem: true" in operator pod template to match operand

Author: joelsmith

bundle/manifests/keda.clusterserviceversion.yaml

@@ -138,7 +138,7 @@ metadata:
     categories: Cloud Provider
     certified: "false"
     containerImage: ghcr.io/kedacore/keda-olm-operator:2.15.0
-    createdAt: "2024-08-09T21:40:07Z"
+    createdAt: "2024-08-12T20:57:13Z"
     description: Operator that provides KEDA, a Kubernetes-based event driver autoscaler
     operatorframework.io/suggested-namespace: keda
     operators.operatorframework.io/builder: operator-sdk-v1.31.0
@@ -655,6 +655,7 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  readOnlyRootFilesystem: true
                 volumeMounts:
                 - mountPath: /certs
                   name: certificates

config/manager/manager.yaml

@@ -36,6 +36,7 @@ spec:
             capabilities:
               drop:
               - ALL
+            readOnlyRootFilesystem: true
           ports:
             - containerPort: 8080
               name: http

config/manifests/bases/keda.clusterserviceversion.yaml

@@ -652,6 +652,7 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  readOnlyRootFilesystem: true
                 volumeMounts:
                 - mountPath: /certs
                   name: certificates

keda/2.14.1/manifests/keda.v2.14.1.clusterserviceversion.yaml

@@ -630,6 +630,7 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  readOnlyRootFilesystem: true
                 volumeMounts:
                 - mountPath: /certs
                   name: certificates

keda/2.15.0/manifests/keda.v2.15.0.clusterserviceversion.yaml

@@ -652,6 +652,7 @@ spec:
                   capabilities:
                     drop:
                     - ALL
+                  readOnlyRootFilesystem: true
                 volumeMounts:
                 - mountPath: /certs
                   name: certificates