do not force read-only file system outside dev mode (#43)

* do not force read-only file system outside dev mode * Create hot-scissors-argue.md
opf · Dec 6, 2023 · 0df7588 · 0df7588
1 parent c0aa8c6
commit 0df7588
Showing 2 changed files with 9 additions and 1 deletion.
diff --git a/.changeset/hot-scissors-argue.md b/.changeset/hot-scissors-argue.md
@@ -0,0 +1,5 @@
+---
+"@openproject/helm-charts": patch
+---
+
+do not force read-only file system outside dev mode
diff --git a/charts/openproject/templates/_helpers.tpl b/charts/openproject/templates/_helpers.tpl
@@ -18,7 +18,10 @@ securityContext:
   {{-
     mergeOverwrite
       (omit .Values.containerSecurityContext "enabled" | deepCopy)
-      (dict "readOnlyRootFilesystem" (not .Values.develop))
+      (dict "readOnlyRootFilesystem" (and
+        (not .Values.develop)
+        (get .Values.containerSecurityContext "readOnlyRootFilesystem")
+      ))
     | toYaml
     | nindent 2
   }}