From df9faf312b59e67b2a049fd225ce98d457c59d90 Mon Sep 17 00:00:00 2001
From: Marko Mikulicic <mkm@bitnami.com>
Date: Thu, 25 Jul 2019 17:56:37 +0200
Subject: [PATCH] Writable /tmp

Our deployment template uses the `readOnlyRootFilesystem` but the k8s `klog` library
likes to write logs in `/tmp`.

Let's mount a writable `/tmp` dir.

Closes #200
---
 controller-norbac.jsonnet | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/controller-norbac.jsonnet b/controller-norbac.jsonnet
index a244d9f2da..6398d20142 100644
--- a/controller-norbac.jsonnet
+++ b/controller-norbac.jsonnet
@@ -53,6 +53,16 @@ local v1beta1_Deployment(name) = kube.Deployment(name) {
                 runAsNonRoot: true,
                 runAsUser: 1001,
               },
+              volumeMounts_+: {
+                tmp: {
+                  mountPath: '/tmp',
+                },
+              },
+            },
+          },
+          volumes_+: {
+            tmp: {
+              emptyDir: {},
             },
           },
         },