fix: enable read-only FS support (#189)

Author: danc094codetogether

charts/intel/templates/deployment.yaml

@@ -116,6 +116,16 @@ spec:
               mountPath: /etc/ssl/certs/java/cacerts
               subPath: cacerts
             {{- end }}
+          {{- if .Values.securityContext.readOnlyRootFilesystem }}
+            - name: run-volatile
+              mountPath: /run/volatile
+            - name: run-nginx
+              mountPath: /run
+            - name: tmp
+              mountPath: /tmp
+            - name: tmp
+              mountPath: /var/tmp              
+            {{- end }}
           ports:
             - name: http
               containerPort: 1080
@@ -164,6 +174,13 @@ spec:
           secret:
             secretName: {{ .Values.java.customCacerts.cacertsSecretName }}
         {{- end }}
+        {{- if .Values.securityContext.readOnlyRootFilesystem }}
+        - name: run-volatile
+          emptyDir: {}
+        - name: tmp
+          emptyDir:
+            medium: Memory
+        {{- end }}
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}