pgadmin4 icon indicating copy to clipboard operation
pgadmin4 copied to clipboard

readOnlyRootFilesystem to true in Kubernetes

Open albundy83 opened this issue 1 year ago • 2 comments

Describe the solution you'd like Hello,

it will be nice that files that are updated by entrypoint.sh file be written to a dedicated empty folder. At least file /pgadmin4/config_distro.py.

For moment, we can't use an emptyDir or persistentVolumeClaim as there are many files in /pgadmin4 folder.

I will be a nice step to achieve a more secure pgadmin4 Deployment by being capable to set readOnlyRootFilesystem to true.

A clear and concise description of what you want to happen.

Describe alternatives you've considered Generate my self the /pgadmin4/config_distro.py as ConfigMap or Secret and mount it but we should be able to disable generation.

Specify a custom path for /pgadmin4/config_distro.py with ENV var.

A clear and concise description of any alternative solutions or features you've considered.

Additional context

Add any other context or screenshots about the feature request here.

albundy83 avatar Mar 29 '24 08:03 albundy83

also looking for a solution to this 👍

oldboys92 avatar May 16 '24 17:05 oldboys92

Hey, is there any solution for this?

balazsjdp avatar Jun 27 '24 08:06 balazsjdp