[bitnami/discourse] Setting readonlyFilesystem to true, restart pods

[divyanshch2019]

Name and Version

bitnami/discourse 7.0.0

What architecture are you using?

amd64

What steps will reproduce the bug?

Install the helm chart with the following values.yaml

containerSecurityContext:
 enabled: true
 allowPrivilegeEscalation: false
 readOnlyRootFilesystem: true

Are you using any custom parameters or values?

securityContext:
 runAsNonRoot: true
 runAsUser: 1000
 runAsGroup: 1000
 seccompProfile:
  type: RuntimeDefault

What is the expected behavior?

The discourse pod should run without any errors

What do you see instead?

/opt/bitnami/scripts/libpostgresqlclient.sh: line 53: cannot create temp file for here-document; Read-only file system

Additional information

No response

[javsalgar]

Hi!

I'm afraid that the bitnami/discourse chart does not have readOnlyRootFilesystem support for the time being. As soon as we have support for it, we will change it in the chart, but we do not have short-term plans to include this support. However, we leave it configurable in case a user has a custom configuration or logic (different from the default) that is compatible