Skip to content

ASM-17923 Gateway ReadOnlyRootFilesystem Support #374

Open
ben-akeyless wants to merge 6 commits into
mainfrom
asm-17923_helm_gw_k8s_readonlyRootFileSystem
Open

ASM-17923 Gateway ReadOnlyRootFilesystem Support #374
ben-akeyless wants to merge 6 commits into
mainfrom
asm-17923_helm_gw_k8s_readonlyRootFileSystem

Conversation

@ben-akeyless
Copy link
Copy Markdown

Overview

Enable the Akeyless Gateway to support readOnlyRootFilesystem: true in Kubernetes by mounting emptyDir volumes at paths where the Gateway needs write access. This is a conditional, opt-in feature that maintains full backward compatibility.

Core Principles

  • Backward Compatible: Existing deployments work exactly as before with zero changes
  • Opt-In Only: Volumes are added ONLY when user sets readOnlyRootFilesystem: true
  • Zero Infrastructure: Uses Kubernetes emptyDir (no persistent storage, no cost, no setup)
  • Security Unchanged: Same runtime behavior, just different filesystem configuration

…ay chart. Updated README and values.yaml to include configuration options, and modified deployment.yaml to handle emptyDir volumes and security context for read-only mode.
…. Updated README for configuration details, modified values.yaml to include new options, and adjusted deployment.yaml to manage emptyDir volumes and security context for the read-only mode.
…ng writable paths. Adjusted security context references for consistency.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant