Merge pull request #856 from dusk125/rofs-fix2

RFE-4154: Remove readOnlyRootFilesystem from KCM container

Author: openshift-merge-bot[bot]

bindata/assets/kube-controller-manager/pod.yaml

@@ -48,14 +48,6 @@ spec:
       name: resource-dir
     - mountPath: /etc/kubernetes/static-pod-certs
       name: cert-dir
-    - mountPath: /tmp
-      name: tmp-dir
-    - mountPath: /etc/pki/ca-trust/extracted/pem
-      name: ca-trust-dir
-    - mountPath: /var/run/kubernetes
-      name: var-run-kubernetes
-    - mountPath: /etc/kubernetes/kubelet-plugins
-      name: kubelet-plugins
     startupProbe:
       httpGet:
         scheme: HTTPS
@@ -77,8 +69,6 @@ spec:
         path: healthz
       initialDelaySeconds: 10
       timeoutSeconds: 10
-    securityContext:
-      readOnlyRootFilesystem: true
   - name: cluster-policy-controller
     env:
       - name: POD_NAME

bindata/bootkube/bootstrap-manifests/kube-controller-manager-pod.yaml

@@ -42,14 +42,6 @@ spec:
       readOnly: true
     - mountPath: /var/log/bootstrap-control-plane
       name: logs
-    - mountPath: /tmp
-      name: tmp
-    - mountPath: /etc/pki/ca-trust/extracted/pem
-      name: ca-trust
-    - mountPath: /var/run/kubernetes
-      name: var-run-kubernetes
-    securityContext:
-      readOnlyRootFilesystem: true
     startupProbe:
       httpGet:
         scheme: HTTPS