Skip to content

feat: Run the operator with a read-only root filesystem - #469

Merged
lfrancke merged 2 commits into
mainfrom
feat/harden-operator-deployment
Oct 22, 2026
Merged

lfrancke merged 2 commits into
mainfrom
feat/harden-operator-deployment

Conversation

@lfrancke

@lfrancke lfrancke commented Oct 22, 2026 •

Copy link
Copy Markdown
Member

Description

Part of stackabletech/issues#903, follow-up to #462.

Adds readOnlyRootFilesystem: true to the operator Deployment. That works now due to stackabletech/operator-templating#656.

Tested on k3d (Kubernetes 1.33.9) with the 0.0.0-dev image in a namespace that enforces restricted

Definition of Done Checklist

Author

  • Changes are OpenShift compatible
  • Helm chart can be installed and deployed operator works
  • Integration tests passed (for non trivial changes)

Reviewer

  • Code contains useful comments
  • Changelog updated

Acceptance

  • Proper release label has been added
  • Release note snippet added

@lfrancke lfrancke self-assigned this Oct 22, 2026
@lfrancke lfrancke moved this to Development: Waiting for Review in Stackable Engineering Oct 22, 2026
@lfrancke
lfrancke enabled auto-merge October 22, 2026 13:06

@NickLarsenNZ NickLarsenNZ left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@lfrancke
lfrancke added this pull request to the merge queue Oct 22, 2026
Merged via the queue into main with commit 3c6565b Oct 22, 2026
13 checks passed
@lfrancke
lfrancke deleted the feat/harden-operator-deployment branch October 22, 2026 13:15
@lfrancke lfrancke moved this from Development: In Review to Development: Done in Stackable Engineering Oct 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Development: Done

Development

Successfully merging this pull request may close these issues.

2 participants