)]}'
{"postgresql/templates/statefulset.yaml":[{"author":{"_account_id":20466,"name":"Tin Lam","email":"tin@lam.wtf","username":"tinlam"},"change_message_id":"5ad6b23d2e99bc5df673bb5729ac51d24bc11257","unresolved":false,"context_lines":[{"line_number":39,"context_line":"      labels:"},{"line_number":40,"context_line":"{{ tuple $envAll \"postgresql\" \"server\" | include \"helm-toolkit.snippets.kubernetes_metadata_labels\" | indent 8 }}"},{"line_number":41,"context_line":"    spec:"},{"line_number":42,"context_line":"      securityContext:"},{"line_number":43,"context_line":"        readOnlyRootFilesystem: true"},{"line_number":44,"context_line":"      serviceAccountName: {{ $serviceAccountName }}"},{"line_number":45,"context_line":"      affinity:"},{"line_number":46,"context_line":"{{ tuple $envAll \"postgresql\" \"server\" | include \"helm-toolkit.snippets.kubernetes_pod_anti_affinity\" | indent 8 }}"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9fdfeff1_c9c25554","line":43,"range":{"start_line":42,"start_character":0,"end_line":43,"end_character":36},"updated":"2019-03-02 02:32:53.000000000","message":"Please use existing HTK function for this.","commit_id":"824c48df519c1cd2c977d10c037e3ddb3bc78005"},{"author":{"_account_id":22477,"name":"Matt McEuen","email":"matt.mceuen@att.com","username":"mattmceuen"},"change_message_id":"038e9ac48ceb3c71dfde559707fecee516d9bc6c","unresolved":false,"context_lines":[{"line_number":39,"context_line":"      labels:"},{"line_number":40,"context_line":"{{ tuple $envAll \"postgresql\" \"server\" | include \"helm-toolkit.snippets.kubernetes_metadata_labels\" | indent 8 }}"},{"line_number":41,"context_line":"    spec:"},{"line_number":42,"context_line":"      securityContext:"},{"line_number":43,"context_line":"        readOnlyRootFilesystem: true"},{"line_number":44,"context_line":"      serviceAccountName: {{ $serviceAccountName }}"},{"line_number":45,"context_line":"      affinity:"},{"line_number":46,"context_line":"{{ tuple $envAll \"postgresql\" \"server\" | include \"helm-toolkit.snippets.kubernetes_pod_anti_affinity\" | indent 8 }}"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"5fc1f717_85be3a63","line":43,"range":{"start_line":42,"start_character":0,"end_line":43,"end_character":36},"in_reply_to":"9fdfeff1_c9c25554","updated":"2019-03-07 23:43:34.000000000","message":"I am guessing the idea is that this pod should *always* have a readOnlyRootFilesystem, rather than being something the operator can override as appropriate.  Unlike, e.g. the runAsUser.  However, I haven\u0027t seen an answer to your question so I\u0027ll re-minus-one this.","commit_id":"824c48df519c1cd2c977d10c037e3ddb3bc78005"}]}