From 6ad04bda364fdcd69ea6abc16780be91eaab97b3 Mon Sep 17 00:00:00 2001
From: Jeremy Cline <jeremy@jcline.org>
Date: Wed, 15 Nov 2017 00:20:40 +0000
Subject: [PATCH] Mount the config read-only for sse2fedmsg

---
 .../openshift-apps/librariesio2fedmsg/files/deploymentconfig.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/openshift-apps/librariesio2fedmsg/files/deploymentconfig.yml b/roles/openshift-apps/librariesio2fedmsg/files/deploymentconfig.yml
index b859ec4a0d..3d2488f78c 100644
--- a/roles/openshift-apps/librariesio2fedmsg/files/deploymentconfig.yml
+++ b/roles/openshift-apps/librariesio2fedmsg/files/deploymentconfig.yml
@@ -63,6 +63,7 @@ items:
           volumeMounts:
           - name: fedmsg-config-volume
             mountPath: /etc/fedmsg.d/
+            readOnly: true
         volumes:
         - name: fedmsg-config-volume
           configMap: