(dubbo-kubernetes) branch master updated: [charts] delete part permissions (#728)

[zhongxjian]

This is an automated email from the ASF dual-hosted git repository.

zhongxjian pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/dubbo-kubernetes.git


The following commit(s) were added to refs/heads/master by this push:
     new 8ed77161 [charts] delete part permissions (#728)
8ed77161 is described below

commit 8ed7716130f7ca0d2fc72c8b6e36cbaa07fb0c66
Author: Jian Zhong <11638...@qq.com>
AuthorDate: Fri Jun 6 10:46:31 2025 +0800

    [charts] delete part permissions (#728)
---
 .../register-discovery/nacos/templates/statefulset.yaml           | 8 +++-----
 .../register-discovery/zookeeper/templates/statefulset.yaml       | 8 +++-----
 2 files changed, 6 insertions(+), 10 deletions(-)

diff --git 
a/manifests/charts/dubbo-control/register-discovery/nacos/templates/statefulset.yaml
 
b/manifests/charts/dubbo-control/register-discovery/nacos/templates/statefulset.yaml
index ac0bd93e..5bb79881 100644
--- 
a/manifests/charts/dubbo-control/register-discovery/nacos/templates/statefulset.yaml
+++ 
b/manifests/charts/dubbo-control/register-discovery/nacos/templates/statefulset.yaml
@@ -123,11 +123,8 @@ spec:
         {{- end }}
         securityContext:
           allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
+          readOnlyRootFilesystem: false
           runAsNonRoot: false
-          capabilities:
-            drop:
-              - ALL
         volumeMounts:
         - name: data
           mountPath: /home/nacos/data
@@ -137,4 +134,5 @@ spec:
           subPath: logs
       volumes:
       - name: data
-        emptyDir: {}
\ No newline at end of file
+        emptyDir:
+          medium: Memory
\ No newline at end of file
diff --git 
a/manifests/charts/dubbo-control/register-discovery/zookeeper/templates/statefulset.yaml
 
b/manifests/charts/dubbo-control/register-discovery/zookeeper/templates/statefulset.yaml
index ef20ed7a..62978598 100644
--- 
a/manifests/charts/dubbo-control/register-discovery/zookeeper/templates/statefulset.yaml
+++ 
b/manifests/charts/dubbo-control/register-discovery/zookeeper/templates/statefulset.yaml
@@ -64,11 +64,8 @@ spec:
           containerPort: 3888
         securityContext:
           allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
+          readOnlyRootFilesystem: false
           runAsNonRoot: false
-          capabilities:
-            drop:
-              - ALL
         volumeMounts:
         - name: data
           mountPath: /var/lib/zookeeper
@@ -78,4 +75,5 @@ spec:
           name: zookeeper-scripts
           defaultMode: 0755
       - name: data
-        emptyDir: {}
\ No newline at end of file
+        emptyDir:
+          medium: Memory
\ No newline at end of file